📦 goods-images — 电商主图生成
v1.0.1一键生成淘宝等电商平台的商品详情图与轮播主图，输入关键词即可自动产出高转化视觉素材。
1· 533·0 当前·0 累计
by @briefness下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceThe skill's purpose (generate e‑commerce images) matches its instructions, but it instructs the agent to run shell/python commands (including pip installs) and to repeatedly send the user's original images to an external image-generation API, which raises privacy and runtime-modification concerns that are not explained in the skill.
评估建议
Before installing or enabling this skill, consider: (1) The skill will repeatedly send the user's original product images to the generate_image service for each of 14 image-generation calls — ask who runs that service and what their data retention/privacy policy is. (2) The runtime instructions include running python commands and pip install Pillow, which changes the agent environment and fetches code from PyPI; if you need strict runtime immutability, disallow runtime installs. (3) The skill pr...详细分析 ▾
✓ 用途与能力
Name/description match the runtime instructions: the skill focuses on producing 5 carousel + 9 detail images using image generation and PIL-based postprocessing. No unrelated credentials, binaries, or config paths are requested.
⚠ 指令范围
SKILL.md instructs the agent to (a) call generate_image many times and always pass the user's original image as ImagePaths (potentially uploading user images to the generation service), (b) run commands like python -c to probe environment and run a PIL script, and (c) pip install Pillow if PIL not present. These runtime steps can transmit user images off‑agent and modify the runtime environment; the skill does not document where generate_image calls go, retention, or privacy implications.
ℹ 安装机制
No formal install spec in the registry, but the instructions tell the agent to run pip install Pillow if needed. Installing packages at runtime via pip is common but does modify the environment and can pull arbitrary code from PyPI — higher friction than a pure instruction-only skill.
✓ 凭证需求
The skill requests no environment variables, credentials, or unrelated config paths. It does probe common font file locations (to render Chinese text), which is reasonable for Chinese typography, but that file probing does access system paths.
✓ 持久化与权限
always:false and no persistent install/update of other skills or system configuration. The skill does not request elevated or permanent privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/10
goods-images 1.0.1 - Now clarifies that 14 images must be generated for each request (5 carousel + 9 detail images). - Adds an explicit step-by-step execution checklist to ensure every image is created using the correct process. - Emphasizes that every image should call `generate_image` separately, always use the original product image as ImagePaths, and overlay logos/texts via PIL, not in the prompt. - Reinforces not to use pure white backgrounds, but to apply contextual scenes based on product style. - No code or file changes; adjustments are documentation and instruction updates for correctness and completeness.
● 可疑
安装命令
点击复制官方npx clawhub@latest install goods-images
镜像加速npx clawhub@latest install goods-images --registry https://cn.longxiaskill.com镜像同步中