← 返回 Skills 市场
gamaleldientarek

Seedream 5 via BytePlus

作者 Gamal Eldien Tarek Abdelsataar · GitHub ↗ · v0.1.0 · MIT-0
cross-platform ⚠ suspicious
89
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install seedream-5-byteplus
功能描述
Generate images with Seedream 5 through the BytePlus Ark API using a direct API key. Use when the user wants Seedream 5 image generation, mentions BytePlus A...
安全使用建议
This skill appears to perform the advertised task, but the package is inconsistent and could leak unrelated secrets. Before installing or using it: (1) Confirm and set SEEDREAM_API_KEY explicitly (the registry metadata did not declare it). (2) Avoid putting unrelated secrets in /root/.clawdbot/.env; instead store the key in a skill-specific env file or pass it at runtime. (3) Review the included script (scripts/seedream-generate.sh) yourself — it POSTs to BytePlus Ark and then downloads the returned image URL, printing raw API responses on failure. (4) Run the skill in a restricted environment or container if you are concerned about .env exposure. If the maintainer can update the registry metadata to declare SEEDREAM_API_KEY and remove or namespace the global .env sourcing, the package would be more trustworthy.
功能分析
Type: OpenClaw Skill Name: seedream-5-byteplus Version: 0.1.0 The skill provides a straightforward implementation for generating images using the BytePlus Ark API. The shell script `scripts/seedream-generate.sh` correctly handles API authentication via environment variables, constructs a JSON payload, and downloads the resulting image from the official BytePlus endpoint (ark.ap-southeast.bytepluses.com). No indicators of data exfiltration, malicious execution, or prompt injection were found.
能力评估
Purpose & Capability
The declared registry metadata lists no required environment variables or primary credential, but both the SKILL.md and the included script require SEEDREAM_API_KEY. Requiring an API key is expected for this purpose, but failing to declare it in metadata is an incoherence.
Instruction Scope
The instructions and script stay within the stated purpose (POST to BytePlus Ark and download the returned image). However the script sources /root/.clawdbot/.env if present, which may cause the skill to load unrelated secrets from a global agent file rather than a skill-scoped credential — this broad file access is out of scope for simple image generation.
Install Mechanism
No install spec; skill is instruction-only with a small bundled shell script. Nothing is downloaded or executed from external URLs during install.
Credentials
Requesting an API key (SEEDREAM_API_KEY) is proportionate, but the package fails to declare it in metadata. Additionally, sourcing /root/.clawdbot/.env can expose other environment secrets stored there — the script assumes a global agent .env location rather than using a clearly-named skill-scoped variable or config file.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide settings, and only writes output into /root/clawd/output. Autonomous invocation is allowed (platform default) but not combined with other broad privileges here.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install seedream-5-byteplus
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /seedream-5-byteplus 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
Initial release
元数据
Slug seedream-5-byteplus
版本 0.1.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Seedream 5 via BytePlus 是什么?

Generate images with Seedream 5 through the BytePlus Ark API using a direct API key. Use when the user wants Seedream 5 image generation, mentions BytePlus A... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 89 次。

如何安装 Seedream 5 via BytePlus?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install seedream-5-byteplus」即可一键安装,无需额外配置。

Seedream 5 via BytePlus 是免费的吗?

是的,Seedream 5 via BytePlus 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Seedream 5 via BytePlus 支持哪些平台?

Seedream 5 via BytePlus 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Seedream 5 via BytePlus?

由 Gamal Eldien Tarek Abdelsataar(@gamaleldientarek)开发并维护,当前版本 v0.1.0。

💬 留言讨论