搜索

PythonReactSEOPDF
OpenClaw

zhipu-image

Generate images using Zhipu AI's CogView model

honestqiao0 来源安装数☆ 0 仓库 Stars

安装与使用

请根据来源仓库和你的 AI 工具说明安装此技能。先阅读技能文件和依赖要求,再添加到工作流。

SkillHub CLI

skillhub install honestqiao/zhipu-cogview-image

打开来源仓库,查看说明和兼容环境后,按来源提供的命令或步骤安装。

将来源链接提供给你的 Agent,让它先读取说明、核对依赖,并向你说明将执行的安装步骤。

查看来源 ↗使用指南

技能说明

Zhipu Image Generation

Generate images using Zhipu AI's CogView model.

⚠️ Security Requirements

This skill requires ZHIPU_API_KEY environment variable to be set before use.

Security Best Practices:
  1. DO NOT store API keys in ~/.bashrc - keys can be leaked
  2. DO NOT source shell configuration files - prevents arbitrary code execution
  3. Set environment variable directly when running the script

Setup

export ZHIPU_API_KEY="your_api_key"

Get your API key from: https://www.bigmodel.cn/usercenter/proj-mgmt/apikeys

Usage

Quick Example
export ZHIPU_API_KEY="your_key"

curl -s -X POST "https://open.bigmodel.cn/api/paas/v4/images/generations" \
  -H "Authorization: Bearer $ZHIPU_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"model": "cogview-4", "prompt": "your description"}'
Using the Script
export ZHIPU_API_KEY="your_key"
./generate.sh "A beautiful Chinese girl in white dress"

Security Analysis

✅ What's Safe:
  • No sourcing of ~/.bashrc or shell config files
  • Uses jq for JSON escaping (prevents injection)
  • Uses HTTPS with TLS 1.2+
  • API key via environment variable (not hardcoded)
  • Input validation (prompt length limit)
  • Generic error messages
⚠️ Considerations:
  • Process list visibility: API key visible in ps aux
  • Use in trusted environments only

Safety Features

Feature Implementation
JSON escaping jq prevents injection
Input validation Prompt length ≤1000 chars
TLS Force TLS 1.2+
Timeout 60 second curl timeout
Error handling Generic messages only

Model

Uses CogView-4 model from Zhipu AI.

API Endpoint

Official: https://open.bigmodel.cn/api/paas/v4/images/generations

来源信息

Source
github
Repository
openclaw/skills
Path
skills/honestqiao/zhipu-cogview-image
Version
—
Commit
c3f5f282e2f2c7e25bcaaf14612d173992c15fed
分类来源
rules
状态
active
可见性
public

这些信息来自收录时的来源分析,可能滞后;使用前请核对最新来源文件。

来源内容

SKILL.md
# Zhipu Image Generation

Generate images using Zhipu AI's CogView model.

## ⚠️ Security Requirements

**This skill requires `ZHIPU_API_KEY` environment variable to be set before use.**

### Security Best Practices:

1. **DO NOT store API keys in ~/.bashrc** - keys can be leaked
2. **DO NOT source shell configuration files** - prevents arbitrary code execution
3. **Set environment variable directly** when running the script

## Setup

```bash
export ZHIPU_API_KEY="your_api_key"
```

**Get your API key from:** https://www.bigmodel.cn/usercenter/proj-mgmt/apikeys

## Usage

### Quick Example

```bash
export ZHIPU_API_KEY="your_key"

curl -s -X POST "https://open.bigmodel.cn/api/paas/v4/images/generations" \
  -H "Authorization: Bearer $ZHIPU_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"model": "cogview-4", "prompt": "your description"}'
```

### Using the Script

```bash
export ZHIPU_API_KEY="your_key"
./generate.sh "A beautiful Chinese girl in white dress"
```

## Security Analysis

### ✅ What's Safe:
- No sourcing of ~/.bashrc or shell config files
- Uses jq for JSON escaping (prevents injection)
- Uses HTTPS with TLS 1.2+
- API key via environment variable (not hardcoded)
- Input validation (prompt length limit)
- Generic error messages

### ⚠️ Considerations:
- **Process list visibility**: API key visible in `ps aux`
- Use in trusted environments only

## Safety Features

| Feature | Implementation |
|---------|----------------|
| JSON escaping | jq prevents injection |
| Input validation | Prompt length ≤1000 chars |
| TLS | Force TLS 1.2+ |
| Timeout | 60 second curl timeout |
| Error handling | Generic messages only |

## Model

Uses **CogView-4** model from Zhipu AI.

## API Endpoint

**Official:** `https://open.bigmodel.cn/api/paas/v4/images/generations`

相关技能

OpenClaw

1password

daggerkun007

Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.