← Back to Skills Marketplace
Grok Imagine API
by
coolhackboy
· GitHub ↗
· v1.0.0
· MIT-0
305
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install poyo-grok-imagine
Description
Use PoYo AI Grok Imagine Video for short text-to-video and image-to-video generation with motion-style controls through the `https://api.poyo.ai/api/generate...
Usage Guidance
This skill will send whatever JSON (including any text or image URLs) you provide to api.poyo.ai using the POYO_API_KEY you supply. Before installing, confirm you trust PoYo and their privacy/usage policies, avoid putting sensitive secrets or private data in payloads, and if you use callback_url ensure your webhook endpoint is safe to receive external POSTs (don't expose internal-only endpoints). Using a scoped or revocable API key is good practice. The included shell script is simple and only posts to the documented PoYo endpoint with curl; there are no hidden endpoints or installers.
Capability Analysis
Type: OpenClaw Skill
Name: poyo-grok-imagine
Version: 1.0.0
The skill bundle is classified as suspicious due to a potential arbitrary file read vulnerability in `scripts/submit_grok_imagine.sh`. The script takes a file path as an argument and uses `cat` to read its contents into a variable, which is then sent as a POST body to `https://api.poyo.ai/api/generate/submit`. This lack of path sanitization could be exploited via prompt injection to trick the agent into exfiltrating sensitive local files (e.g., credentials or configuration files) to the external API endpoint.
Capability Assessment
Purpose & Capability
Name/description (text-to-video/image-to-video via PoYo) matches required artifacts: curl, POYO_API_KEY, API endpoint and example payloads. Nothing requested (binaries, env, paths) is unrelated to the stated purpose.
Instruction Scope
SKILL.md confines actions to building/submitting JSON payloads to https://api.poyo.ai/api/generate/submit, saving task_id, and polling or using callbacks. It does not instruct reading unrelated files, sweep environment values, or exfiltrate data to other endpoints.
Install Mechanism
Instruction-only skill with no install spec; includes a small shell script that uses curl. No downloads, archives, or package installs — low install risk.
Credentials
Requires a single API key (POYO_API_KEY), which is appropriate and used as the Bearer token. No other credentials, config paths, or broad secrets are requested.
Persistence & Privilege
Does not request always:true or any persistent/privileged system changes. The skill is user-invocable and may be called autonomously by the agent (platform default) but that is expected for a client integration and not combined with other red flags.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install poyo-grok-imagine - After installation, invoke the skill by name or use
/poyo-grok-imagine - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of PoYo Grok Imagine Video skill.
- Supports short text-to-video and image-to-video generation with motion controls via PoYo API.
- Implements model selection, payload construction, and submission workflow.
- Provides clear guidance on required parameters and output expectations.
- Requires POYO_API_KEY and curl; see documentation for quickstart and examples.
Metadata
Frequently Asked Questions
What is Grok Imagine API?
Use PoYo AI Grok Imagine Video for short text-to-video and image-to-video generation with motion-style controls through the `https://api.poyo.ai/api/generate... It is an AI Agent Skill for Claude Code / OpenClaw, with 305 downloads so far.
How do I install Grok Imagine API?
Run "/install poyo-grok-imagine" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Grok Imagine API free?
Yes, Grok Imagine API is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Grok Imagine API support?
Grok Imagine API is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Grok Imagine API?
It is built and maintained by coolhackboy (@coolhackboy); the current version is v1.0.0.
More Skills