by 安全扫描
OpenClaw
安全
high confidenceThe skill is internally consistent: it sends your prompt to a configured text-to-image API and returns an image URL, and the requested environment variables match that purpose.
评估建议
This skill forwards your prompt and optional negative_prompt to whatever API_BASE you configure using the provided API_KEY and MODEL_NAME. Before installing, ensure the API endpoint is trustworthy and that you don't reuse high-privilege credentials. Treat prompts as potentially sensitive (they may include IP or private data). Expect minimal error handling in the code (network errors or unexpected responses could propagate). If you need stricter privacy, use an API endpoint/policy that guarantees...详细分析 ▾
✓ 用途与能力
Name/description (text-to-image, 9:16 images) align with the code and manifest: the skill posts prompt + negative_prompt to an external txt2img endpoint and returns image_url.
✓ 指令范围
SKILL.md instructs configuring API_KEY, API_BASE, and MODEL_NAME — exactly the values the runtime code reads. The instructions do not ask the agent to access unrelated files, credentials, or system state.
✓ 安装机制
No install spec and a single small skill.js file; nothing is downloaded or written to disk by an installer.
ℹ 凭证需求
The skill requires API_KEY, API_BASE, and MODEL_NAME — these are appropriate for a generic T2I integration. Note: supplying an API_BASE and key means prompts (which may contain private IP or copyrighted content) are sent to that external service, so the endpoint must be trusted and the key should have limited scope.
✓ 持久化与权限
always is false and the skill does not modify other skills or system configuration. It requires no persistent privileges beyond calling an external API.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.32026/4/9
- Updated skill description and documentation for improved clarity and brevity. - Renamed skill to "文生图生成技能". - Simplified input/output parameter explanations. - Expanded and updated usage scenarios. - Added configuration requirements in the technical notes. - Removed the _meta.json file.
● 无害
安装命令
点击复制官方npx clawhub@latest install 04-text-to-image
镜像加速npx clawhub@latest install 04-text-to-image --registry https://cn.longxiaskill.com