by 安全扫描
OpenClaw
可疑
high confidenceNULL
评估建议
This skill's code looks consistent with its stated function, but the registry metadata failed to declare the required OPENAI_API_KEY (and optional OPENAI_BASE_URL / OPENAI_API_BASE). Before installing or running: (1) verify you want to provide your OpenAI API key and prefer using the --api-key flag or a dedicated environment variable; (2) do NOT set OPENAI_BASE_URL or OPENAI_API_BASE to unknown hosts (that would cause your API key to be sent to that host); (3) run with --dry-run first to inspect...详细分析 ▾
✓ 用途与能力
The included script implements batch image generation, prompt sampling, saving PNGs, prompts.json, and an index.html gallery — this matches the skill name and description.
ℹ 指令范围
SKILL.md tells the user to run the included Python script and open the gallery; it expects outputs in ~/Projects/tmp when present or ./tmp otherwise. The runtime instructions do not ask the agent to read unrelated system files or exfiltrate data, but they reference a specific repo-like path (~/Projects/agent-scripts/skills/openai-image-gen/scripts/gen.py) which may be incorrect for some installs and could confuse users.
✓ 安装机制
No install spec or external downloads — the skill is instruction + a local script only, so nothing is fetched or installed automatically.
⚠ 凭证需求
SKILL.md and the script require an OpenAI API key (OPENAI_API_KEY) and accept OPENAI_BASE_URL / OPENAI_API_BASE overrides, but the registry metadata lists no required env vars or primary credential — this is an incoherence. Additionally, allowing OPENAI_BASE_URL/OPENAI_API_BASE to point anywhere means the script will send your Authorization header (the API key) to whatever host is configured, which could be abused if misconfigured or maliciously set.
✓ 持久化与权限
The skill does not request persistent/always-on inclusion, does not modify other skills, and only writes output files into the chosen out directory; no elevated platform privileges are requested.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/1/5
● 无害
安装命令
点击复制官方npx clawhub@latest install openai-image-gen
镜像加速npx clawhub@latest install openai-image-gen --registry https://cn.longxiaskill.com