← 返回 Skills 市场
1237
总下载
3
收藏
4
当前安装
1
版本数
在 OpenClaw 中安装
/install qwen-image-skill
功能描述
Generate images using Alibaba Cloud Bailian Qwen-Image and Z-Image models (通义千图文生图 + 人像照片模型)
安全使用建议
This skill appears to implement the described Alibaba Bailian image-generation flow and only needs a DASHSCOPE_API_KEY. Before installing: 1) verify the package metadata vs SKILL.md — ensure you supply DASHSCOPE_API_KEY if you intend to use it; 2) prefer setting the API key as an environment variable (export DASHSCOPE_API_KEY) rather than relying on TOOLS.md, since the script will try to read TOOLS.md from several filesystem locations (including unexpected paths) which could expose local files; 3) consider creating a dedicated API key with limited scope/quota for this skill; 4) be aware the script makes outbound HTTPS requests to dashscope.aliyuncs.com and will download the returned image from whatever host the API provides; 5) if you are uncomfortable with the script reading files outside the skill directory, inspect or run it in an isolated environment (container or VM) or modify the script to restrict TOOLS.md lookup to a single safe location. If these issues are acceptable, the skill is plausibly coherent with its stated purpose; otherwise proceed with caution.
功能分析
Type: OpenClaw Skill
Name: qwen-image-skill
Version: 1.0.0
The skill is designed to generate images using Alibaba Cloud's Qwen-Image and Z-Image models. The `SKILL.md` provides clear instructions and usage examples without any prompt injection attempts. The `scripts/generate.py` script retrieves the `DASHSCOPE_API_KEY` from environment variables or the `TOOLS.md` file (a documented configuration source for OpenClaw skills), makes HTTPS requests to the legitimate Alibaba Cloud API endpoint `dashscope.aliyuncs.com`, and saves the generated image locally. All observed behaviors are aligned with the stated purpose, and there is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or obfuscation.
能力评估
Purpose & Capability
The skill's purpose (generate images via Alibaba Bailian Qwen-Image / Z-Image) matches the code and API endpoint used (dashscope.aliyuncs.com). However, the registry metadata in the package summary lists no required environment variables while SKILL.md and the script declare and require DASHSCOPE_API_KEY — an inconsistency that should be resolved.
Instruction Scope
Runtime instructions and the included script are focused on image generation and are proportionate: they build a JSON payload, POST to the Bailian endpoint, parse the response, and download the returned image. The script also attempts to discover the API key by reading TOOLS.md from several filesystem locations (current working dir, an absolute path /home/admin/clawd/TOOLS.md, and a path four levels up from the script). Reading those files is intended to obtain the declared key, but the locations accessed could expose or read files outside the skill's folder — worth noting before granting access.
Install Mechanism
This is an instruction-only skill with a single Python script and no install spec or external downloads. There is no package install or archive extraction — low install-surface risk.
Credentials
The only credential the skill needs is DASHSCOPE_API_KEY (used as a Bearer token to call the Bailian API), which is reasonable for this purpose. But the mismatch between the package-level 'required env vars: none' and SKILL.md's 'DASHSCOPE_API_KEY' is confusing. Also, the script's fallback to searching multiple TOOLS.md locations may read user files containing other secrets if present — it only extracts a matching DASHSCOPE_API_KEY line, but file reads are sensitive.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system config, and does not install persistent components. It only performs network calls at runtime and writes the downloaded image to a local path specified by the user (or a generated filename).
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install qwen-image-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/qwen-image-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Qwen-Image skill (v1.0.0) initial release:
- Generate images using Alibaba Cloud's Qwen-Image and Z-Image models.
- Automatic scene detection chooses the best model (e.g., z-image-turbo for portraits, qwen-image-max for general use).
- Supports high-quality Chinese text rendering in images.
- Multiple aspect ratios and model options available, with manual override support.
- Simple setup—requires only a DASHSCOPE_API_KEY.
元数据
常见问题
qwenz-image-gen 是什么？
Generate images using Alibaba Cloud Bailian Qwen-Image and Z-Image models (通义千图文生图 + 人像照片模型). 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1237 次。
如何安装 qwenz-image-gen？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install qwen-image-skill」即可一键安装，无需额外配置。
qwenz-image-gen 是免费的吗？
是的，qwenz-image-gen 完全免费（开源免费），可自由下载、安装和使用。
qwenz-image-gen 支持哪些平台？
qwenz-image-gen 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 qwenz-image-gen？
由 irron（@irron）开发并维护，当前版本 v1.0.0。
推荐 Skills