技能 baoyu-image-gen
📦
baoyu-image-gen
内容修订 r1 高风险 ⚡ 包含脚本⚙️ 外部命令📁 文件系统访问🔑 环境变量🌐 网络访问
使用 OpenAI 和 Google 生成图像
图像提示通常需要提供商设置、尺寸以及可重复使用的输出路径。此技能会运行一个基于 API 的生成器，并提供宽高比、质量和参考图像选项。
支持: Claude Codex Code(CC)
安装前请停下并请求确认。
请审查安装计划，并在更改文件前获得用户明确同意。
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
智能体请求
Review the Skillstore skill "baoyu-image-gen" from https://skillstore.io/skills/jimliu-baoyu-image-gen.md and its manifest at https://skillstore.io/api/skills/jimliu-baoyu-image-gen/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“baoyu-image-gen”。 提示：用于智能手表的平静产品背景，16:9。
预期结果:
一个已保存的宽幅图像路径，以及一条简短确认，其中说明提供商和模型。
正在使用“baoyu-image-gen”。 提示文件：品牌简报和活动主题。输出：social-card.png。
预期结果:
一个生成的图像文件，将两个提示文件合并为一个视觉请求。
正在使用“baoyu-image-gen”。 参考图像：source.png。提示：将对象改为蓝色。
预期结果:
当选择受支持的 Google 模型时，保存一个使用参考图像的变体。
安全审计
高风险v4 • 2026/7/6 打开版本化报告
The code mostly implements the documented image-generation workflow, and many static hits are documentation backticks or JavaScript template literals. Confirmed risks center on loading project and home env files, sending API credentials over network requests, and allowing project configuration to redirect provider base URLs.
5
已扫描文件
860
分析行数
20
复核项
0
已忽略误报
已确认安全问题 (10)
高
Environment file access
const homeEnv = await loadEnvFile(path.join(home, ".baoyu-skills", ".env"));
The script reads home and project .baoyu-skills/.env files that may contain credentials. Project-local env files are untrusted in shared repositories.
高
Environment file access
const cwdEnv = await loadEnvFile(path.join(cwd, ".baoyu-skills", ".env"));
The script reads home and project .baoyu-skills/.env files that may contain credentials. Project-local env files are untrusted in shared repositories.
高
Environment file access
if (!process.env[k]) process.env[k] = v;
The script merges parsed env-file values into process.env. That lets project-local configuration affect later credential and endpoint handling.
高
Environment file access
if (!process.env[k]) process.env[k] = v;
The script merges parsed env-file values into process.env. That lets project-local configuration affect later credential and endpoint handling.
高
Environment file access
return process.env.GOOGLE_API_KEY || process.env.GEMINI_API_KEY || null;
The provider reads GOOGLE_API_KEY or GEMINI_API_KEY for outbound API requests. This is necessary for generation but is sensitive credential handling.
高
Environment file access
const base = process.env.GOOGLE_BASE_URL || "https://generativelanguage.googleapis.com";
GOOGLE_BASE_URL controls the outbound API endpoint. If supplied by a project env file, Google credentials and prompts can be sent to a non-Google host.
高
Environment file access
const baseURL = process.env.OPENAI_BASE_URL || "https://api.openai.com/v1";
OPENAI_BASE_URL controls the outbound API endpoint. If supplied by a project env file, OpenAI credentials and prompts can be sent to a non-OpenAI host.
高
Environment file access
const apiKey = process.env.OPENAI_API_KEY;
The provider reads OPENAI_API_KEY and uses it in an Authorization header for image generation. This is required but exposes credentials to the configured endpoint.
显示全部 10 条已确认问题
高
Project Configuration Can Redirect API Credentials
The script loads project .baoyu-skills/.env values, then uses OPENAI_BASE_URL or GOOGLE_BASE_URL for requests that include API keys. A malicious project can set a custom endpoint and receive provider credentials.
The code explicitly loads cwd .baoyu-skills/.env into process.env and provider code uses base URL env vars for credentialed fetch calls.
中
Unpinned Runtime Invocation Through npx
The usage instructions invoke npx -y bun without a pinned package version. This can execute package-manager-resolved code before the local skill script runs.
The documented command path is clear, but the practical risk depends on how the host environment resolves npx and bun.
能力复核项 (20)
这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。
高
Environment variable access (dot notation)
return process.env.GOOGLE_API_KEY || process.env.GEMINI_API_KEY || null;
The provider reads GOOGLE_API_KEY or GEMINI_API_KEY for outbound API requests. This is necessary for generation but is sensitive credential handling.
高
Environment variable object
return process.env.GOOGLE_API_KEY || process.env.GEMINI_API_KEY || null;
The provider reads GOOGLE_API_KEY or GEMINI_API_KEY for outbound API requests. This is necessary for generation but is sensitive credential handling.
高
Generic API/secret keys
return process.env.GOOGLE_API_KEY || process.env.GEMINI_API_KEY || null;
The provider reads GOOGLE_API_KEY or GEMINI_API_KEY for outbound API requests. This is necessary for generation but is sensitive credential handling.
高
Environment variable access (dot notation)
const apiKey = process.env.OPENAI_API_KEY;
The provider reads OPENAI_API_KEY and uses it in an Authorization header for image generation. This is required but exposes credentials to the configured endpoint.
高
Environment variable object
const apiKey = process.env.OPENAI_API_KEY;
The provider reads OPENAI_API_KEY and uses it in an Authorization header for image generation. This is required but exposes credentials to the configured endpoint.
高
Generic API/secret keys
const apiKey = process.env.OPENAI_API_KEY;
The provider reads OPENAI_API_KEY and uses it in an Authorization header for image generation. This is required but exposes credentials to the configured endpoint.
中
Environment variable access (bracket notation)
if (!process.env[k]) process.env[k] = v;
Values from .baoyu-skills/.env are copied into process.env when unset. Project-local configuration can influence provider endpoints and credentials used later.
中
Environment variable access (bracket notation)
if (!process.env[k]) process.env[k] = v;
Values from .baoyu-skills/.env are copied into process.env when unset. Project-local configuration can influence provider endpoints and credentials used later.
中
Environment variable object
if (!process.env[k]) process.env[k] = v;
Values from .baoyu-skills/.env are copied into process.env when unset. Project-local configuration can influence provider endpoints and credentials used later.
中
Environment variable object
if (!process.env[k]) process.env[k] = v;
Values from .baoyu-skills/.env are copied into process.env when unset. Project-local configuration can influence provider endpoints and credentials used later.
中
Fetch API call
const res = await fetch(buildGoogleUrl(pathname), {
This POST sends prompts, optional reference image data, and x-goog-api-key to the configured Google endpoint. The network egress is required but sensitive.
中
Hardcoded URL
const base = process.env.GOOGLE_BASE_URL || "https://generativelanguage.googleapis.com";
GOOGLE_BASE_URL controls the outbound API endpoint. If supplied by a project env file, Google credentials and prompts can be sent to a non-Google host.
中
Environment variable access (dot notation)
const base = process.env.GOOGLE_BASE_URL || "https://generativelanguage.googleapis.com";
GOOGLE_BASE_URL controls the outbound API endpoint. If supplied by a project env file, Google credentials and prompts can be sent to a non-Google host.
中
Environment variable object
const base = process.env.GOOGLE_BASE_URL || "https://generativelanguage.googleapis.com";
GOOGLE_BASE_URL controls the outbound API endpoint. If supplied by a project env file, Google credentials and prompts can be sent to a non-Google host.
中
Fetch API call
const res = await fetch(`${baseURL}/images/generations`, {
This POST sends the prompt and OpenAI bearer token to the configured endpoint. The network egress is required but sensitive.
中
Hardcoded URL
const baseURL = process.env.OPENAI_BASE_URL || "https://api.openai.com/v1";
OPENAI_BASE_URL controls the outbound API endpoint. If supplied by a project env file, OpenAI credentials and prompts can be sent to a non-OpenAI host.
中
Environment variable access (dot notation)
const baseURL = process.env.OPENAI_BASE_URL || "https://api.openai.com/v1";
OPENAI_BASE_URL controls the outbound API endpoint. If supplied by a project env file, OpenAI credentials and prompts can be sent to a non-OpenAI host.
中
Environment variable object
const baseURL = process.env.OPENAI_BASE_URL || "https://api.openai.com/v1";
OPENAI_BASE_URL controls the outbound API endpoint. If supplied by a project env file, OpenAI credentials and prompts can be sent to a non-OpenAI host.
中
Ruby/shell backtick execution
```bash
The usage block instructs agents to run npx -y bun, which can execute package-manager code before the local script. This is expected for the skill but remains an external command supply-chain risk.
低
Fetch API call
const imgRes = await fetch(img.url);
The script fetches an image URL returned by the provider. With a custom endpoint, that response can trigger an extra outbound request.
风险因素
⚡ 包含脚本 (2)
⚙️ 外部命令 (54)
scripts/main.ts:8-37 scripts/main.ts:86 scripts/main.ts:108 scripts/main.ts:115 scripts/main.ts:136 scripts/main.ts:143 scripts/main.ts:150 scripts/main.ts:160 scripts/main.ts:165 scripts/main.ts:238 scripts/providers/google.ts:43 scripts/providers/google.ts:44 scripts/providers/google.ts:49 scripts/providers/google.ts:67 scripts/providers/google.ts:76 scripts/providers/google.ts:86 scripts/providers/google.ts:151 scripts/providers/google.ts:197 scripts/providers/openai.ts:85 scripts/providers/openai.ts:89 scripts/providers/openai.ts:96 SKILL.md:13 SKILL.md:14 SKILL.md:20-26 SKILL.md:26-48 SKILL.md:48-66 SKILL.md:66-72 SKILL.md:72 SKILL.md:73-74 SKILL.md:74-75 SKILL.md:75-76 SKILL.md:76 SKILL.md:77 SKILL.md:78 SKILL.md:79-80 SKILL.md:80-81 SKILL.md:81-82 SKILL.md:82-83 SKILL.md:83-89 SKILL.md:89-90 SKILL.md:90-91 SKILL.md:91-92 SKILL.md:92-93 SKILL.md:93-94 SKILL.md:94-96 SKILL.md:96 SKILL.md:100-108 SKILL.md:108-109 SKILL.md:109-111 SKILL.md:111-115 SKILL.md:115 SKILL.md:117-118 SKILL.md:118-132 SKILL.md:132-136
📁 文件系统访问 (10)
🔑 环境变量 (33)
scripts/main.ts:208 scripts/main.ts:211 scripts/main.ts:244 scripts/main.ts:245 scripts/main.ts:37 scripts/main.ts:208 scripts/main.ts:211 scripts/main.ts:244 scripts/main.ts:245 scripts/main.ts:29 scripts/main.ts:30 scripts/main.ts:31 scripts/main.ts:244 scripts/main.ts:245 scripts/main.ts:252 scripts/providers/google.ts:9 scripts/providers/google.ts:27 scripts/providers/google.ts:36 scripts/providers/google.ts:9 scripts/providers/google.ts:27 scripts/providers/google.ts:36 scripts/providers/google.ts:27 scripts/providers/google.ts:54 scripts/providers/openai.ts:4 scripts/providers/openai.ts:64 scripts/providers/openai.ts:65 scripts/providers/openai.ts:4 scripts/providers/openai.ts:64 scripts/providers/openai.ts:65 scripts/providers/openai.ts:65 scripts/providers/openai.ts:67 SKILL.md:89 SKILL.md:90
审计者: codex 查看审计历史 →
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/jimliu-baoyu-image-gen/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/jimliu-baoyu-image-gen?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/jimliu-baoyu-image-gen?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/jimliu-baoyu-image-gen/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/jimliu-baoyu-image-gen.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
jimliu. (2026). baoyu-image-gen security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/jimliu-baoyu-image-gen/audits/4BibTeX 引用
@techreport{jimliu-jimliu-baoyu-image-gen-2026,
author = {jimliu},
title = {baoyu-image-gen security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/jimliu-baoyu-image-gen/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "baoyu-image-gen security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "jimliu"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/jimliu-baoyu-image-gen/audits/4"
identifiers:
- type: other
value: "skillstore:jimliu-baoyu-image-gen:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 高 45
架构
85
可维护性
85
内容
70
社区
83
规范符合性
你能构建什么
创建设计草稿
根据简短提示生成概念艺术、产品场景或活动视觉图。
准备营销素材
为帖子、幻灯片和落地页创建宽幅、方形或竖版图像。
自动化视觉工作流
将 API 图像生成添加到代理工作流中，并使用选定的提供商和输出路径。
试试这些提示
创建单张图像
使用 baoyu-image-gen 创建一张日出时现代桌面布置的图像。将其保存为 desk-scene.png。
设置形状和质量
为一款效率应用生成一张 16:9 hero image。使用 2k 质量并将其保存到项目 assets 文件夹中。
使用参考图像
使用提供的参考图像，并生成一个具有相同构图的蓝色变体。使用 Google provider。
运行特定提供商集合
使用 OpenAI 为发布横幅生成三个选项。使用横向宽高比，并返回简洁的结果详情。
最佳实践
- 将 API 密钥保存在用户级环境配置中，并避免提交项目 env 文件。
- 使用当前项目内的明确输出路径。
- 在发送提示或参考图像之前，先审查自定义 base URL。
避免
- 不要将机密文档用作提示文件或参考图像。
- 不要启用来自不可信项目的自定义提供商端点。
- 不要在未检查 API 成本和速率限制的情况下请求大批量生成。
常见问题
此技能支持哪些提供商？
它支持通过 API 调用使用 OpenAI 图像生成和 Google 图像模型。
它需要 API 密钥吗？
是的。运行生成之前，请设置 OPENAI_API_KEY、GOOGLE_API_KEY 或 GEMINI_API_KEY。
它可以使用参考图像吗？
可以，但参考图像只会发送到受支持的 Google 多模态模型。
我可以控制图像形状吗？
可以。使用宽高比、尺寸、质量或 Google 图像尺寸选项。
图像保存在哪里？
图像会写入通过 image 选项提供的输出路径。
自定义端点支持安全吗？
只使用你信任的自定义 base URL，因为 API 凭据会发送到它们。
开发者详情
作者
jimliu许可证
MIT
Skillstore 修订
r1
版本提示
作者未声明版本。
引用
a06681402992ceae98ba04d54cfd4ab004862696
维护新鲜度
2026/7/18
使用量
21 次下载 · 175 次浏览