← 返回 Skills 市场
410
总下载
0
收藏
2
当前安装
1
版本数
在 OpenClaw 中安装
/install wan-text2image
功能描述
阿里云DashScope Wan2.6文生图工具。使用阿里云百炼平台的Wan2.6-t2i模型生成图片。 当用户需要：AI生成图片、文生图、从文字生成图像时触发。 需要DASHSCOPE_API_KEY环境变量（已在系统中配置）。
安全使用建议
This skill appears to do what it says: send prompts to Aliyun DashScope and return generation results. Before installing, verify that you are comfortable sending prompt text to dashscope.aliyuncs.com and that the DASHSCOPE_API_KEY you provide has appropriate scope and billing limits. Note the registry metadata currently omits the required DASHSCOPE_API_KEY—treat that as a metadata bug and confirm the key requirement with the publisher. As best practice, use a dedicated API key with minimal privileges, monitor usage/billing, and rotate/revoke the key if you stop using the skill.
功能分析
Type: OpenClaw Skill
Name: wan-text2image
Version: 1.0.0
The script `scripts/t2i.sh` is vulnerable to command injection because it expands shell variables ($PROMPT, $NEGATIVE_PROMPT, $SIZE) directly inside a double-quoted string passed to curl. This allows an attacker to execute arbitrary commands on the host system via crafted input. While the script correctly targets the official Alibaba DashScope API (dashscope.aliyuncs.com) and lacks clear evidence of malicious intent, the critical security flaw warrants a suspicious classification.
能力评估
Purpose & Capability
The name/description, SKILL.md, and the shell script all describe calling Aliyun DashScope's wan2.6-t2i model. The script posts the prompt/negative_prompt/size to the endpoint and uses an Authorization bearer token as expected. Minor naming inconsistency: SKILL.md and script refer to 'wan-t2i' while the registry slug is 'wan-text2image' (likely cosmetic).
Instruction Scope
Runtime instructions are limited to invoking the included script (or curl) to call the stated API. The script only reads its command-line args and the DASHSCOPE_API_KEY environment variable; it does not read other files, scan the system, or transmit data to unexpected endpoints.
Install Mechanism
No install specification — the skill is instruction/script-only. The single included shell script is short and readable; nothing is downloaded or written to disk by an install step.
Credentials
The SKILL.md and script require DASHSCOPE_API_KEY (used as a Bearer token for the API), which is proportional to the stated purpose. However, the registry metadata lists 'Required env vars: none', creating an inconsistency that should be corrected before trusting the metadata.
Persistence & Privilege
The skill does not request always:true and has no install-time persistence or configuration changes. It does not attempt to modify other skills or system-wide settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install wan-text2image - 安装完成后，直接呼叫该 Skill 的名称或使用
/wan-text2image触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of wan-t2i skill.
- Provides text-to-image generation using Aliyun DashScope Wan2.6-t2i model.
- Supports prompt and negative prompt inputs; allows custom image sizes.
- Requires DASHSCOPE_API_KEY (already configured) and curl.
- Offers shell script interface with clear parameter options.
- Chinese prompts are recommended for optimal results.
元数据
常见问题
wan-text2image 是什么？
阿里云DashScope Wan2.6文生图工具。使用阿里云百炼平台的Wan2.6-t2i模型生成图片。 当用户需要：AI生成图片、文生图、从文字生成图像时触发。 需要DASHSCOPE_API_KEY环境变量（已在系统中配置）。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 410 次。
如何安装 wan-text2image？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install wan-text2image」即可一键安装，无需额外配置。
wan-text2image 是免费的吗？
是的，wan-text2image 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
wan-text2image 支持哪些平台？
wan-text2image 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 wan-text2image？
由 baokui（@baokui）开发并维护，当前版本 v1.0.0。
推荐 Skills