Xiaohongshu Image Gen

小红书图片生成技能 - 针对家装、美食、穿搭等赛道的AI图片生成，支持多种生成方式和规格优化

This package appears to implement the advertised image-generation functionality, but the bundle contains unexpected and potentially risky elements. Before installing: 1) Ask the publisher/source for clarification about why a Tushare (stock-data) client is included and why requirements.txt pins xiaohongshu-image-gen; 2) Do not set or expose any secrets (OPENAI_API_KEY / STABILITY_API_KEY) until you confirm the package's origin; 3) Inspect/execute the skill in a sandbox or isolated environment (no sensitive credentials) if you want to test it; 4) Be cautious of pip installing using the provided requirements.txt — that could pull a different package from PyPI; 5) If you need stronger assurance, request a clean package without unrelated files or obtain the source from a known homepage or repository. Additional helpful information that would raise confidence to 'benign': a trustworthy source/homepage, an explanation for the extraneous files, and a corrected install script or an explicit install spec.

Type: OpenClaw Skill Name: xiaohongshu-image-gen Version: 1.0.1 The skill bundle contains a significant anomaly: the file 'scripts/api_client.py' is a full-featured Tushare financial data API client, which is entirely unrelated to the stated purpose of Xiaohongshu image generation. Additionally, 'requirements.txt' is improperly configured, listing the skill name itself rather than the actual dependencies used in the code (e.g., 'openai', 'tushare', 'pandas', 'requests', 'Pillow'). While no explicit data exfiltration or malicious payloads were identified, the inclusion of unrelated API wrappers and poor dependency management suggests either a supply chain risk or a highly unprofessional assembly that could lead to unexpected agent behavior.