tokenrouter-image-generator

Generate or edit images through Palebluedot Ai(PBD)-TokenRouter's multimodal image generation endpoint (`/v1/chat/completions`) using TokenRouter-compatible...

This skill appears to implement TokenRouter image generation as described, but note three issues before installing: (1) the package metadata fails to declare that it requires a TokenRouter API key — the script will look for PBD_TOKENROUTER_API_KEY or a --api-key and will also try to read ~/.openclaw/openclaw.json to auto-detect a key; (2) avoid pasting your API key into the chat as suggested in the README — that exposes the secret in chat logs and to the agent; prefer setting PBD_TOKENROUTER_API_KEY in your shell or configuring it in a secure place; (3) the script will write images to ~/.openclaw/media/outbound and will send image bytes and your API key to https://api.tokenrouter.com — only proceed if you trust TokenRouter and are comfortable with network access. If you want higher assurance, ask the author to: (a) update the skill metadata to declare required env vars, (b) remove or warn clearly against pasting keys into chat, and (c) document exactly what fields are read from ~/.openclaw/openclaw.json. If you accept those caveats this skill is functionally coherent; otherwise treat it as potentially risky.

Type: OpenClaw Skill Name: tokenrouter-images Version: 1.0.2 The skill bundle provides a legitimate tool for generating and editing images using the TokenRouter API. The script `scripts/generate_image.py` correctly implements image-to-image and text-to-image workflows, including a documented mechanism to retrieve API keys from environment variables or the local OpenClaw configuration file (~/.openclaw/openclaw.json). No evidence of malicious intent, unauthorized data exfiltration, or prompt injection attacks was found; the behavior is transparently described in SKILL.md and aligned with the tool's stated purpose.