by 安全扫描
OpenClaw
安全
high confidenceThe skill is internally consistent: it only needs curl and a POYO_API_KEY and its instructions and script match the described purpose of submitting image-generation jobs to api.poyo.ai.
评估建议
This skill appears coherent, but review these practical points before installing: (1) POYO_API_KEY is a credential for your poyo.ai account — treat it like a secret (use a dedicated key with limited scope if possible and do not commit it to public repos). (2) The API supports callback_url webhooks: only supply callback URLs you control, since results (and possibly user-provided reference image metadata) will be POSTed there. (3) The included shell script reads payload JSON from a file or stdin; ...详细分析 ▾
✓ 用途与能力
Name, description, declared requirements (curl and POYO_API_KEY), SKILL.md, example curl usage, and the included shell script all align with submitting Seedream 4.5 generation/edit jobs to https://api.poyo.ai/api/generate/submit.
✓ 指令范围
Runtime instructions are narrowly scoped to building/submitting JSON payloads, using the provided script or curl examples, and reporting the returned task_id. The script only reads a payload file or stdin and the POYO_API_KEY; it does not instruct reading unrelated system files or other environment variables.
✓ 安装机制
This is an instruction-only skill with no install spec. No remote downloads or archive extraction occur; the only runtime dependency is curl, which is reasonable for the stated purpose.
✓ 凭证需求
The single required env var is POYO_API_KEY (declared as primary). That directly matches the API Authorization header used by the script and examples — no unrelated credentials are requested.
✓ 持久化与权限
The skill is user-invocable, not forced (always:false). It does not request to modify other skills or system settings and does not persist credentials itself.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/14
Initial release of poyo-seedream-4-5 skill. - Adds support for Seedream 4.5 image generation and editing via PoYo API. - Handles 2K/4K resolution output, multi-reference image editing, and higher image counts. - Supports both standard and edit workflows, with clear model selection guidance. - Outlines required and optional input fields for each use case. - Includes instructions for submitting requests and reporting task IDs for polling.
● 无害
安装命令 点击复制
官方npx clawhub@latest install poyo-seedream-4-5
镜像加速npx clawhub@latest install poyo-seedream-4-5 --registry https://cn.clawhub-mirror.com
技能文档
Use this skill for Seedream 4.5 jobs on PoYo. It covers high-resolution generation, multi-reference image workflows, and edit requests.
Use When
- The user explicitly asks for
Seedream 4.5,seedream-4.5, orseedream-4.5-edit. - The task is high-resolution generation, image-to-image, or edit.
- The workflow needs multiple reference images or higher output counts.
Model Selection
seedream-4.5: standard generation entry point.seedream-4.5-edit: use when the request explicitly edits supplied images.
Key Inputs
promptis required.image_urlssupports up to 10 images and is required forseedream-4.5-edit.sizecan be a resolution token like2K/4Kor an aspect ratio like1:1,16:9,21:9.ncontrols output count from1to15.
Execution
- Read
references/api.mdfor endpoint details, model ids, key fields, example payloads, and polling notes. - Use
scripts/submit_seedream_4_5.shto submit a raw JSON payload from the shell. - If the user only needs a curl example, adapt the example from
references/api.mdinstead of rewriting from scratch. - After submission, report the
task_idclearly so follow-up polling is easy.
Output expectations
When helping with this model family, include:
- chosen model id
- final payload or a concise parameter summary
- whether reference images are involved
- returned
task_idif a request was actually submitted - next step: poll status or wait for webhook
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制