← 返回 Skills 市场
Quick Img V2
作者
MarjorieBroad
· GitHub ↗
· v1.1.0
· MIT-0
287
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install quick-img
功能描述
Generate images using curl and the SkillBoss API.
安全使用建议
Before installing or using this skill: (1) Recognize it requires network access to two external endpoints — api.heybossai.com (for image generation) and httpbin.org (the bundled "Check IP" script). The latter is unrelated to the stated purpose and will reveal your agent's public IP to a third party. (2) The SKILL.md examples call curl and node but the skill metadata does not declare these as required binaries — verify that your runtime provides them and be cautious about executing scripts. (3) Only provide SKILLBOSS_API_KEY if you trust the SkillBoss service and the skill author; consider creating a limited-scope API key if possible. (4) If you don't need the IP-checking helper, remove or review scripts/hello.mjs before running. (5) If you want to reduce risk, ask the author to (a) declare required binaries, (b) remove or make optional the httpbin check, and (c) document exactly what data is sent to external endpoints.
功能分析
Type: OpenClaw Skill
Name: quick-img
Version: 1.1.0
The skill provides straightforward functionality to generate images via the SkillBoss API (api.heybossai.com) and a utility to check the outbound IP address using httpbin.org. The code in SKILL.md and scripts/hello.mjs is transparent, aligns with the stated purpose, and contains no indicators of malicious intent, data exfiltration, or unauthorized execution.
能力评估
Purpose & Capability
The skill's stated purpose is to generate images via the SkillBoss API, which is consistent with the curl example that posts to https://api.heybossai.com/v1/run. However the SKILL.md examples rely on curl and node, yet the registry metadata lists no required binaries — this is an incoherence (the skill should declare curl and node if it needs them).
Instruction Scope
The runtime instructions include an unrelated "Check IP" step that runs scripts/hello.mjs. That script performs a network request to https://httpbin.org/get and prints the origin IP. Contacting an external site unrelated to the image API is scope creep and transmits the agent's network-visible IP and headers to a third party. The skill also pipes remote API output into a node one-liner — the one-liner parses JSON (not eval), which is expected, but executing any processor on network data increases the attack surface.
Install Mechanism
This is an instruction-only skill with no install spec, so nothing is written to disk on install. That's the lowest install risk.
Credentials
The skill requests a single credential, SKILLBOSS_API_KEY, which aligns with calling the SkillBoss API. The SKILL.md uses that key directly in the request to api.heybossai.com — this is expected. No other credentials or config paths are requested.
Persistence & Privilege
The skill does not request always:true and is not attempting to modify other skills or agent configuration. Autonomous invocation is enabled by default but is not combined with elevated persistence here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install quick-img - 安装完成后，直接呼叫该 Skill 的名称或使用
/quick-img触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.1.0
Added JS hello script
v1.0.0
Curl-based image generation
元数据
常见问题
Quick Img V2 是什么？
Generate images using curl and the SkillBoss API. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 287 次。
如何安装 Quick Img V2？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install quick-img」即可一键安装，无需额外配置。
Quick Img V2 是免费的吗？
是的，Quick Img V2 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Quick Img V2 支持哪些平台？
Quick Img V2 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Quick Img V2？
由 MarjorieBroad（@marjoriebroad）开发并维护，当前版本 v1.1.0。
推荐 Skills