Use when users need DesignKit image editing or ecommerce product-image generation, with public metadata optimized for ClawHub and runtime guidance defaulting...
Security Analysis
high confidenceThe skill's files, runtime instructions, and requested credential align with its stated purpose (image editing and ecommerce image workflows); nothing appears disproportionate or aimed at unrelated access.
Name/description match the code and instructions: scripts and SKILL.md implement background removal, image restoration, and an ecommerce multi-step workflow. Required binaries (bash, curl, python3) and the single required env var (DESIGNKIT_OPENCLAW_AK) are appropriate for calling remote APIs and running the included scripts.
SKILL.md and sub-skill documents constrain actions to user-provided image URLs or local paths and instruct the agent to upload only explicitly supplied local images. The scripts follow that flow and validate local files' formats before upload. The instructions do reference optional debugging/logging env vars (OPENCLAW_REQUEST_LOG, OPENCLAW_*), but those are documented and optional.
No install spec is provided; this is a repository of scripts and SKILL.md. No remote arbitrary downloads or archive extracts occur at install time. Execution happens via included shell/Python scripts, which is proportionate for the feature set.
Only one required credential is declared (DESIGNKIT_OPENCLAW_AK) and it is used by the code as X-Openclaw-AK to authenticate API requests. Other environment variables are optional overrides or debugging flags. There are no unrelated secret requests (no AWS/GitHub/etc keys).
The skill is not marked always:true and does not attempt to modify other skills or system-wide agent settings. It writes outputs only to configurable locations and includes a guard against writing into the skill repository itself.
Guidance
This package is coherent and implements the image-editing and ecommerce workflows it claims. Before installing: (1) be aware that any local image path you supply will be uploaded to DesignKit/OpenClaw (this is explicit in the docs); (2) only set OPENCLAW_REQUEST_LOG=1 for debugging because it will emit request logs (the code attempts to redact sensitive fields but keep logs limited); (3) ensure the API key (DESIGNKIT_OPENCLAW_AK) comes from a trusted source and consider using a scoped or expendable key; and (4) confirm the remote endpoints (openclaw-designkit-api.meitu.com / designkit.cn) are acceptable for your privacy/compliance needs.
Latest Release
v1.0.5
- 新增能力：支持在电商套图结果中，按指定某张图重新生成（render_regen）结果图。
More by @meituskills
Published by @meituskills on ClawHub
