TencentCloud Image AIGC Detection

腾讯云 AI 生成图片识别 (TencentCloud Image AIGC Detection) 技能。适用于 AI 生成图片检测、图片真伪鉴别、AI 绘画检测、Deepfake 检测等场景。TencentCloud Image AIGC Detection is an AI-generated content...

What to consider before installing: - The skill legitimately needs Tencent Cloud credentials (TENCENTCLOUD_SECRET_ID, TENCENTCLOUD_SECRET_KEY) and a BizType; set these only if you trust the skill and the account. Registry metadata currently omits these required env vars — treat that as a red flag and prefer skills whose metadata matches their runtime requirements. - The repository includes a Python script that calls ims.tencentcloudapi.com using the official SDK. Verify the code (scripts/main.py) yourself and confirm there are no extra hidden endpoints or hardcoded secrets. The visible code uses the official SDK and standard endpoints. - There is no install spec: you will need to install tencentcloud-sdk-python (pip) manually or allow the agent to install it. Prefer installing dependencies from a known source (PyPI) in a controlled environment (virtualenv) rather than running arbitrary install commands as root. - Prefer using temporary STS tokens (TENCENTCLOUD_TOKEN) and least-privilege credentials. Don't hard-code secret keys; avoid putting long-lived secrets in globally sourced shell profile files unless you understand the exposure. - Note the skill instructs the agent to run the detection automatically (without extra confirmation) when the user asks for image detection. If you want manual approval before network calls or credential usage, don't enable autonomous invocation or require the agent to ask for explicit consent before running the script. - What would reduce risk: update the registry metadata to declare required env vars and primary credential, add an explicit install spec (pip install step), and include a brief security/permission note about credential scope or recommended roles. If those corrections are made and you review the code yourself, the skill would be closer to benign.

Type: OpenClaw Skill Name: tencentcloud-aigc-recog-image Version: 1.0.8 The skill bundle provides a legitimate interface for Tencent Cloud's AI-generated image detection service. The Python script (scripts/main.py) correctly handles API credentials and image processing (URL or local file) using the official Tencent Cloud SDK, communicating only with the legitimate endpoint ims.tencentcloudapi.com. The instructions in SKILL.md are focused on ensuring the AI agent uses the tool reliably and provides accurate feedback to the user without hallucination, and no malicious behaviors or significant security vulnerabilities were identified.