纯血万相冰箱盲盒

纯血万相冰箱盲盒 - 基于 Wan2.7/Wan2.1 视觉大模型的烹饪灵感触发器。用户上传冰箱内部照片，Skill 利用万相图像生图像能力，将杂乱冰箱场景语义化提炼并重组为精致创意料理概念图。支持多种菜系（中餐/西餐/日料/法餐/意餐/韩式/泰式/融合）、难易程度（简单/适中/挑战）、烹饪时间（快手/适中/慢炖...

What to check before installing or running this skill: - Do not paste your permanent or high-privilege API keys. The skill asks for WAN_API_KEY (and examples use WAN_API_URL). Use a scoped or ephemeral key and confirm the API host is legitimate before supplying credentials. - The registry metadata claims no required env vars, but SKILL.md and examples require WAN_API_KEY/WAN_API_URL — ask the author to fix the metadata or explain why it was omitted. - Inspect scripts/generate_gourmet.py (already included) to see exactly which endpoints are called and what data is uploaded. Verify the WAN_API_URL points to a trusted provider (official Wan/DashScope endpoints) — the placeholder domains in examples (wan.xxx) are not authoritative. - Remove or inspect any hidden/control characters in SKILL.md (the scanner flagged unicode-control-chars). Hidden control chars can be used to manipulate model behavior; request a clean/plain version from the author or scrub the file yourself. - Be aware images you upload (fridge photos) and generated outputs may be stored on external servers (OSS URLs are referenced). If photos contain sensitive information (labels, notes, or interior locations), treat uploads as potentially public. - Because the bundle includes runnable code but no install manifest, run it in an isolated environment (sandbox/container/VM) and review network traffic if possible. - If you need higher assurance, ask the publisher for: a homepage/source repository, author identity, a clear canonical WAN API endpoint, and removal/explanation of the control characters. If those are not provided, treat the skill as untrusted. Confidence note: medium — the core functionality is coherent, but the metadata mismatch and prompt-injection signal prevent a clean 'benign' verdict without further author clarification.

Type: OpenClaw Skill Name: pure-wan-fridge-gourmet Version: 3.0.0 The skill bundle is a legitimate tool designed to analyze fridge photos and generate recipes and gourmet images/videos using Alibaba's DashScope (Wan/Qwen-VL) APIs. The core logic in `scripts/generate_gourmet.py` and the supporting `data/recipe_database.py` are well-documented and align perfectly with the stated purpose. The script handles API keys via environment variables and communicates only with official Alibaba Cloud endpoints (dashscope.aliyuncs.com), with no evidence of malicious data exfiltration, unauthorized execution, or harmful instructions.