📦 Meshy AI — AI生成2D/3D
v0.1.0调用 Meshy.ai REST API，实现文本生成2D图、图片生成3D模型，自动轮询异步任务并将生成的 OBJ 文件下载到本地，需在环境变量中配置 MESHY_API_KEY。
3· 1.9k·2 当前·2 累计
by 下载技能包
最后更新
2026/2/26
安全扫描
OpenClaw
安全
high confidenceThe skill is internally consistent with its stated purpose (Meshy.ai client to create async tasks and download image/OBJ outputs); the only notable issue is registry metadata not declaring the required MESHY_API_KEY, which looks like an oversight rather than malicious behavior.
评估建议
This skill appears to do exactly what it claims: it needs your Meshy API key, creates async jobs, polls for completion, and downloads images/OBJ files. Before installing or running: (1) ensure the registry metadata is corrected to list MESHY_API_KEY so you know what credentials are required; (2) only provide an API key you trust Meshy with (use limited-scope keys if available); (3) be aware downloads come from URLs returned by the service — avoid running untrusted binaries and inspect downloaded...详细分析 ▾
ℹ 用途与能力
The code and SKILL.md implement a Meshy.ai client (text-to-image and image-to-3d) and require MESHY_API_KEY and optional MESHY_BASE_URL — this matches the description. However the registry metadata lists no required env vars/primary credential, which is inconsistent with the code and docs.
✓ 指令范围
Runtime instructions are narrow and explicit: set MESHY_API_KEY (optional MESHY_BASE_URL), run the provided Python scripts, create tasks, poll until completion, and download returned URLs. The scripts only read local files you explicitly pass (for data-URI upload) and do network calls to the Meshy API and the returned model/image URLs.
✓ 安装机制
No install spec (instruction-only + bundled Python scripts). Nothing is downloaded or executed at install time; risk is limited to running included Python scripts.
ℹ 凭证需求
The code requires a single API key (MESHY_API_KEY) and optionally MESHY_BASE_URL, which is appropriate for a REST API client. The registry metadata failing to declare this required env var is a discrepancy that should be corrected before trusting the metadata alone.
✓ 持久化与权限
The skill does not request permanent presence (always=false) and does not modify other skills or system-wide settings. It can be invoked autonomously by the agent (platform default), which is expected for a callable skill.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/1/23
Initial release of the meshy-ai skill. - Integrates Meshy.ai REST API for generating assets: text-to-2D images and image-to-3D models. - Supports downloading results locally, always saving OBJ files for 3D outputs. - CLI scripts provided for both generation modes with async polling and output management. - Requires setting MESHY_API_KEY in the environment for authentication.
● 无害
安装命令
点击复制官方npx clawhub@latest install clawdbot-meshyai-skill
镜像加速npx clawhub@latest install clawdbot-meshyai-skill --registry https://cn.longxiaskill.com