安全扫描
OpenClaw
安全
high confidenceThis is a straightforward instruction-only quickstart for the QuiverAI SVG API that only asks for the expected API key and contains coherent, proportional instructions.
评估建议
This skill is a normal quickstart guide. Before installing or using it: (1) verify the domain and links (quiver.ai, docs.quiver.ai) are the official service you intend to use since the skill source is listed as unknown; (2) confirm the npm package name (@quiverai/sdk) exists on the registry and inspect its source or use a known-good package lock before installing; (3) never commit QUIVERAI_API_KEY to version control and store it in a secrets manager for production; (4) create least-privilege API...详细分析 ▾
✓ 用途与能力
The name/description (QuiverAI SVG API quickstart) matches the declared requirement (QUIVERAI_API_KEY) and the runtime instructions (account, API key, env var, SDK install, curl/snippet). There are no unrelated credentials or binaries requested.
✓ 指令范围
SKILL.md stays on-topic: it instructs how to create an API key, set an environment variable, install the SDK, and call the API. It does not ask the agent to read unrelated files, collect extra system data, or exfiltrate information to third-party endpoints.
✓ 安装机制
There is no installation spec or downloaded code; the skill is instruction-only. The only install instruction is to run a public npm package (@quiverai/sdk), which is appropriate for a Node quickstart and not performed by the skill itself.
✓ 凭证需求
Only one environment variable (QUIVERAI_API_KEY) is declared and used, which is proportionate for an API quickstart. No other secrets, config paths, or unrelated credentials are requested.
✓ 持久化与权限
The skill is not marked always:true and does not request persistent system-wide changes. Autonomous invocation is allowed by default but is expected for skills and is not combined with any other elevated privileges here.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/27
Initial release - QuiverAI API快速入门指南
● 无害
安装命令 点击复制
官方npx clawhub@latest install quiverai-quickstart
镜像加速npx clawhub@latest install quiverai-quickstart --registry https://cn.clawhub-mirror.com
技能文档
本指南将帮助你快速上手QuiverAI的SVG生成API,包括账户创建、API密钥配置、SDK安装和发送请求的完整流程。
前期准备
1. 创建账户
首先访问 quiver.ai/start 创建QuiverAI公开测试账户,然后登录 app.quiver.ai。
2. 创建API密钥
- 在应用中打开 API Keys(Settings > Developers > API Keys)
- 点击 Create API key 并命名
- 立即复制密钥 —— 密钥只显示一次,无法后续找回
3. 配置环境变量
QuiverAI API使用Bearer认证方式。将密钥保存为 QUIVERAI_API_KEY:
macOS/Linux:
export QUIVERAI_API_KEY=""
Windows PowerShell:
$env:QUIVERAI_API_KEY=""
安装SDK
Node.js SDK
使用官方Node.js SDK:
npm install @quiverai/sdk
或使用 pnpm/bun:
pnpm add @quiverai/sdk
# 或
bun add @quiverai/sdk
发送第一个请求
使用Node.js SDK
import { QuiverAI } from "@quiverai/sdk";const client = new QuiverAI({
bearerAuth: process.env["QUIVERAI_API_KEY"],
});
const logo = await client.createSVGs.generateSVG({
model: "arrow-preview",
prompt: "A logo for the next AI Design startup",
});
console.log(logo);
使用REST API
也可以直接使用HTTP请求:
curl --request POST \
--url https://api.quiver.ai/v1/svgs/generations \
--header 'Authorization: Bearer ' \
--header 'Content-Type: application/json' \
--data '{
"model": "arrow-preview",
"prompt": "A logo for the next AI Design startup",
"n": 1,
"stream": false
}'
错误处理
API返回JSON错误载荷:
{
"status": 429,
"code": "rate_limit_exceeded",
"message": "Rate limit exceeded",
"request_id": "req_01J..."
}
常见错误码:
401 Unauthorized: API密钥缺失或无效402 Payment Required: 积分不足429 Too Many Requests: 请求过于频繁,请稍后重试
计费模型
- 每次成功的API请求消耗1积分
- 计费按请求次数计算,即使
n大于1也只消耗1积分
下一步
- 查看 API参考文档
- 了解 定价和套餐
- 探索模型:Text to SVG 和 Image to SVG
重要提示
- 永远不要将API密钥提交到版本控制仓库
- 确保环境变量在生产环境中安全存储
- 关注API调用频率以避免触发速率限制
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制