技能 skywork-design
📦
skywork-design
內容修訂 r1 高風險 🌐 網路存取📁 檔案系統存取🔑 環境變數⚙️ 外部命令
使用 Skywork 建立視覺素材
團隊需要快速取得視覺素材，而不必手動進行設計設定。此技能使用 Skywork 圖像工作流程，根據清楚的提示詞生成或編輯圖像。
支援: Claude Codex Code(CC)
安裝前請停止並請求確認。
請審查安裝計畫，並在變更檔案前取得使用者明確同意。
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "skywork-design" from https://skillstore.io/skills/skyworkai-skywork-design.md and its manifest at https://skillstore.io/api/skills/skyworkai-skywork-design/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「skywork-design」。 為不鏽鋼旅行杯建立一張方形主視覺圖。
預期結果:
- 一張 4K 產品主視覺圖，採用純白背景和置中構圖。
- 一個本機圖像檔案和一個可分享的 Skywork OSS URL。
- 如果生成失敗或帳戶權益不足，會顯示簡短狀態訊息。
正在使用「skywork-design」。 將這個標誌參考圖編輯成高級文具模擬圖。
預期結果:
- 一張 3:4 文具模擬圖，保留提供的標誌和品牌色彩。
- 一則簡明說明，描述已儲存的圖像和遠端圖像連結。
正在使用「skywork-design」。 為健康工作室建立一份三摺宣傳冊。
預期結果:
- 一個外側宣傳冊版面，包含三個面板和清楚的摺線結構。
- 在使用者核准視覺方向後，可接著製作內側版面。
安全審計
高風險v5 • 2026/7/7 開啟版本化報告
The skill performs legitimate image generation work, but it uses external Skywork APIs, uploads user prompts and reference images, and stores reusable authentication tokens in a hidden home-directory file. Most prose-based static hits are false positives, while the confirmed risks are concentrated in network transfer, token handling, Windows shell launch behavior, and local file writes.
11
已掃描檔案
1,166
分析行數
23
複核項目
0
已忽略的誤報
已確認的安全問題 (2)
高
Prompts and Reference Images Sent to External API
The image workflow sends user prompts, optional base64 reference images, and an authentication token to Skywork API endpoints. This is disclosed as core behavior, but it can expose sensitive visual assets or prompt content to a third party.
The code directly constructs token-bearing HTTP requests and includes prompt text plus base64 image data in request bodies. This is clear third-party data transfer, although it is expected for the skill.
中
Unvalidated Upgrade Link From Script Output
The instructions tell the agent to extract an upgrade URL from script output and present it to the user. Without domain validation, compromised output could cause a user-facing phishing or payment-redirection link.
The instruction explicitly forwards a URL parsed from logs, but the observed text does not show host validation. The risk depends on the trustworthiness of backend error output.
能力複核項目 (23)
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
高
Python subprocess.Popen
subprocess.Popen(["start", url], shell=True, start_new_session=True,
The Windows branch launches the browser with shell=True and a URL influenced by configuration. Shell interpretation creates an injection risk if the URL source is compromised or misconfigured.
高
Hidden file in home directory
Token is stored in user home directory as ~/.skywork_token (JSON format).
The code stores an authentication token in a hidden home-directory file. Persistent plaintext credential storage is security-sensitive and lacks permission hardening in the shown implementation.
高
Hidden file in home directory
TOKEN_FILE = os.path.expanduser("~/.skywork_token")
The code stores an authentication token in a hidden home-directory file. Persistent plaintext credential storage is security-sensitive and lacks permission hardening in the shown implementation.
高
Hidden file access
Token is stored in user home directory as ~/.skywork_token (JSON format).
The code stores an authentication token in a hidden home-directory file. Persistent plaintext credential storage is security-sensitive and lacks permission hardening in the shown implementation.
高
Hidden file access
TOKEN_FILE = os.path.expanduser("~/.skywork_token")
The code stores an authentication token in a hidden home-directory file. Persistent plaintext credential storage is security-sensitive and lacks permission hardening in the shown implementation.
高
Python file write/append
with open(TOKEN_FILE, "w", encoding="utf-8") as f:
The script writes token data to the cache file without setting restrictive file permissions. A reusable credential can remain exposed to other local processes or backups.
高
Hidden file in home directory
2. Cached token file `~/.skywork_token` → validate via API, if valid, use it
The documentation directs use of a cached token file in the user home directory. That matches the script behavior and represents persistent credential storage.
高
Hidden file access
2. Cached token file `~/.skywork_token` → validate via API, if valid, use it
The documentation directs use of a cached token file in the user home directory. That matches the script behavior and represents persistent credential storage.
中
Python HTTP libraries
req = urllib.request.Request(
The script sends POST requests to the Skywork gateway with a token header and prompt or image payloads. This is a real third-party data transfer risk, even though it is expected behavior.
中
Python HTTP libraries
with urllib.request.urlopen(req, timeout=300) as resp:
The script sends POST requests to the Skywork gateway with a token header and prompt or image payloads. This is a real third-party data transfer risk, even though it is expected behavior.
中
Hardcoded URL
SKYWORK_GATEWAY_URL = os.environ.get("SKYWORK_GATEWAY_URL", "https://api-tools.skywork.ai/theme-gate
The gateway defaults to an external Skywork endpoint and can be overridden by SKYWORK_GATEWAY_URL. Later token-bearing requests use this base URL, so endpoint control is security relevant.
中
Python file write/append
with open(out_abs, "wb") as f:
The script writes downloaded remote image bytes to a caller-provided filename. This is expected output behavior but can overwrite or create files outside the intended workspace.
中
Python os file operations
os.makedirs(os.path.dirname(out_abs) or ".", exist_ok=True)
The script creates directories derived from the output path. This is legitimate for saving images, but it can modify arbitrary filesystem locations if the filename is unsafe.
中
Python environment access
SKYWORK_GATEWAY_URL = os.environ.get("SKYWORK_GATEWAY_URL", "https://api-tools.skywork.ai/theme-gate
SKYWORK_GATEWAY_URL controls the external endpoint used for later token-bearing API calls. This environment override could redirect prompts, images, and credentials.
中
Hardcoded URL
API_BASE = os.environ.get("SKYWORK_API_BASE", "https://api.skywork.ai")
The API base defaults to Skywork and can be overridden by environment. Token validation and login-key requests use this endpoint, making the network destination security relevant.
中
Hardcoded URL
LOGIN_BASE_URL = os.environ.get("SKYWORK_WEB_BASE", "https://skywork.ai")
The login web base defaults to Skywork and can be overridden by environment. The resulting URL is shown to users and opened in a browser, so redirect risk exists.
中
Python environment access
API_BASE = os.environ.get("SKYWORK_API_BASE", "https://api.skywork.ai")
SKYWORK_API_BASE can redirect authentication traffic. Because token checks use this endpoint, the environment variable is security-sensitive.
中
Python environment access
LOGIN_BASE_URL = os.environ.get("SKYWORK_WEB_BASE", "https://skywork.ai")
SKYWORK_WEB_BASE controls the login URL shown to users and opened in a browser. A malicious value could redirect users to an unexpected authentication page.
低
Python HTTP libraries
import urllib.request
The HTTP library import is used later for real outbound requests. Network access is central to the skill and can transmit user prompts or image data.
低
Python HTTP libraries
req = urllib.request.Request(file_url, method="GET")
The script downloads a result image from a URL returned by the API. This is expected, but it still retrieves remote content and writes it locally.
低
Python HTTP libraries
with urllib.request.urlopen(req, timeout=120) as r:
The script downloads a result image from a URL returned by the API. This is expected, but it still retrieves remote content and writes it locally.
低
Python environment access
env_token = os.environ.get("SKYBOT_TOKEN", "")
The script reads SKYBOT_TOKEN from the environment as a credential source. This is an expected auth pattern, but it is still access to secret material.
低
Python environment access
env_token = os.environ.get("SKYBOT_TOKEN", "")
The script reads SKYBOT_TOKEN from the environment as a credential source. This is an expected auth pattern, but it is still access to secret material.
風險因素
🌐 網路存取 (9)
📁 檔案系統存取 (9)
🔑 環境變數 (6)
⚙️ 外部命令 (30)
scripts/skywork_auth.py:87 scripts/skywork_auth.py:90 scripts/skywork_auth.py:93 SKILL.md:22-25 SKILL.md:25-28 SKILL.md:28-29 SKILL.md:29-32 SKILL.md:32-41 SKILL.md:41-43 SKILL.md:43-46 SKILL.md:46-48 SKILL.md:48-51 SKILL.md:51-53 SKILL.md:53-59 SKILL.md:59-60 SKILL.md:60 SKILL.md:63-75 SKILL.md:75 SKILL.md:85-89 SKILL.md:89-92 SKILL.md:92-93 SKILL.md:93-94 SKILL.md:94-98 SKILL.md:98-99 SKILL.md:99-103 SKILL.md:103 SKILL.md:104-105 SKILL.md:105-106 SKILL.md:106-113 SKILL.md:113-114
審計單位: codex 檢視審計紀錄 →
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/skyworkai-skywork-design/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/skyworkai-skywork-design?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/skyworkai-skywork-design?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/skyworkai-skywork-design/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/skyworkai-skywork-design.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
SkyworkAI. (2026). skywork-design security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/skyworkai-skywork-design/audits/5BibTeX 引用
@techreport{skyworkai-skyworkai-skywork-design-2026,
author = {SkyworkAI},
title = {skywork-design security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/skyworkai-skywork-design/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "skywork-design security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "SkyworkAI"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/skyworkai-skywork-design/audits/5"
identifiers:
- type: other
value: "skillstore:skyworkai-skywork-design:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據 證據置信度: 中 45
架構
85
可維護性
87
內容
70
社群
83
規範符合度
你可以打造什麼
推出產品圖片組
建立尺寸和視覺風格一致的 marketplace 主視覺、情境生活和功能重點標示圖片。
發展品牌概念
根據共同的品牌方向生成標誌、色盤卡、字體展示和文具模擬圖。
製作活動視覺
以特定平台的長寬比建立社群貼文、海報、宣傳冊和故事視覺。
試試這些提示
建立簡單圖像
Create a 2K image of [subject] for [purpose]. Use a [style] look, [lighting] lighting, and a [aspect ratio] canvas.
編輯參考圖像
Edit the attached image to [change]. Preserve [important elements], adjust [colors or layout], and keep the final image suitable for [channel].
建立品牌視覺系統
Create a visual identity for [brand] in [industry]. Start with a logo concept, then align palette, typography, and mockup style around [brand adjectives].
生成電子商務商品頁圖片組
Create a product image set for [product]. Include a white-background hero, lifestyle scene, feature callout image, and optional detail shots for [buyer concerns].
最佳實務
- 在生成前提供目標渠道、受眾、所需長寬比和最終用途。
- 當活動或品牌系統需要一致性時，使用參考圖像。
- 發布前審閱生成的文字、標誌、產品聲明和品牌細節。
避免
- 未經使用者同意，不要提交機密產品照片或私人文件。
- 不要在同一個提示詞中要求許多彼此無關的視覺風格。
- 在未檢查品牌、商標和平台要求前，不要使用生成的商業素材。
常見問題
這個技能沒有 Skywork 帳戶也能使用嗎？
不能。它需要來自環境、快取登入或瀏覽器驗證的有效 Skywork token。
它可以編輯現有圖像嗎？
可以。它接受一張或多張參考圖像，並將它們連同編輯指示傳送到 Skywork API。
支援哪些長寬比？
它支援常見比例，包括方形、直式、橫式、手機限時動態、橫幅和超寬格式。
生成的圖像會儲存在哪裡？
腳本會將圖像儲存到指定的本機檔名，並同時列印遠端 OSS URL。
它可以建立完整的品牌系統嗎？
它可以引導建立多步驟品牌素材，例如標誌、色盤、字體範例、圖樣和文具模擬圖。
發布前使用者應該審閱哪些內容？
使用者應審閱圖像準確性、可讀文字、產品聲明、品牌合規性和涉及權利敏感的內容。