📦 Ganesh — 象头神
v1.0.0APIGanesh Image Hosting API，用于图像托管。当用户提到“Ganesh”、“上传图像”、“图像托管”或询问图像分享时使用。
0· 16·0 当前·0 累计
by 下载技能包
最后更新
2026/4/20
安全扫描
OpenClaw
可疑
medium confidence该技能的声明用途（图像托管）与其说明相符，但它提到了“Client ID”却未声明任何必需凭证，并指向一个晦涩的短域名文档链接——这些不一致之处以及未知来源使该技能值得谨慎对待。
评估建议
This skill claims to integrate with an image-hosting API and is instruction-only, but it references a Client ID without declaring any required credential and points to a short/obscure docs URL. Before installing or using it: 1) Verify the vendor/source (ask where 'Ganesh' comes from or prefer a skill with a known homepage). 2) Do not paste your production API keys or secrets into the chat; prefer platform-managed environment variables if the skill truly needs them. 3) Inspect the documentation U...详细分析 ▾
ℹ 用途与能力
Name/description and SKILL.md consistently describe an image-hosting API for uploading images. However, the SKILL.md references a 'Client ID' as required for the API while the skill metadata declares no required environment variables or primary credential and has no homepage or known source. That mismatch is unexpected: a skill that needs an API key should normally declare it.
ℹ 指令范围
The instructions are minimal and stay within the stated purpose (upload images and get shareable URLs). They do not instruct reading arbitrary system files or accessing unrelated credentials. However, they defer important details (how to obtain/use the Client ID, exact upload endpoints, and request flow) to an external docs link, which transfers trust to that external URL.
✓ 安装机制
Instruction-only skill with no install spec and no code files — nothing is written to disk by an installer, which is the lowest-risk install posture.
⚠ 凭证需求
SKILL.md mentions a Client ID but the skill declares no required environment variables or primary credential. This inconsistency is a red flag: a skill that requires credentials should declare them so the platform and user can manage secrets appropriately. Also the external docs URL is an obscure short domain (ishortn.ink), which could redirect to unexpected endpoints — relying on that domain to obtain API details increases risk.
✓ 持久化与权限
The skill does not request always:true, does not declare modifications to other skills or system config, and uses platform-default autonomous invocation — nothing unusual in persistence or privilege.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/20
Ganesh Image Hosting API 技能首发 - 推出 Ganesh 免费图床服务 - 支持上传图片并生成可分享 URL - 可用于图片分享、嵌入或文档 - 无需注册即可匿名上传 - 提供官方 API 文档链接，获取最新用法
● 可疑
安装命令
点击复制官方npx clawhub@latest install ganesh-api
镜像加速npx clawhub@latest install ganesh-api --registry https://cn.longxiaskill.com
技能文档
# Ganesh Image Hosting Ganesh 是一项免费的图片托管服务。上传图片后可获得分享、嵌入文章或文档所需的 URL。 ## 使用场景 - 上传图片获取可分享链接 - 为博客或文档托管图片 - 获取 Markdown 可用的图片 URL - 匿名上传图片（无需注册） ## API 参考 获取 Client ID 后，即可通过 Ganesh API 上传图片。完整文档见 https://ishortn.ink/ganesh-official-api，内容会频繁更新，请以官方文档为准。