TencentCloud Image Face Fusion

图片人脸融合（专业版）为同步接口，支持自定义美颜、人脸增强、牙齿增强、拉脸等参数，最高支持8K分辨率，有多个模型类型供选择。

This skill implements Tencent Cloud Face Fusion and will send images you provide to facefusion.tencentcloudapi.com using your Tencent API keys. Before installing: (1) note the registry metadata does not list the required environment variables — the SKILL.md and script require TENCENTCLOUD_SECRET_ID and TENCENTCLOUD_SECRET_KEY, so supply keys only if you trust the skill. (2) The skill enforces a 'zero-interaction' rule: the agent is instructed to execute the script immediately without asking the user; consider whether you want automatic execution that will upload images to an external cloud service. (3) The script will auto-install the tencentcloud SDK via pip at runtime — ensure you are comfortable with runtime package installs. (4) If you proceed, restrict the API key to minimal permissions, test with non-sensitive images first, and review the included scripts (main.py) yourself. If you want safer behavior, require the agent to ask for explicit confirmation before uploading user data and ensure required env vars are declared in the registry metadata.

Type: OpenClaw Skill Name: tencentcloud-image-face-fusion Version: 1.0.0 The skill is classified as suspicious due to high-risk capabilities and potential vulnerabilities. The script `scripts/main.py` automatically executes `pip install` to manage dependencies and reads arbitrary local files based on user-provided paths without validation, which could lead to unauthorized file access. Additionally, `SKILL.md` contains instructions for the AI agent to follow a 'Zero interaction principle,' explicitly directing it to execute commands without user confirmation. This combination significantly increases the risk of prompt injection attacks, where an agent could be manipulated into reading and exfiltrating sensitive local data to the Tencent Cloud API endpoint (facefusion.tencentcloudapi.com).