Skills/ClawHub/linkpix-gpt-image-2

linkpix-gpt-image-2@0.1.2

VERIFIED

Publisher claims: "GPT Image 2 跨境多平台主图精修。帮助电商运营、商品摄影、品牌商品团队和直播带货团队直接完成“GPT Image 2 跨境多平台主图精修”：既可从文字生成商品图，也可加入参考图精准控制主体、构图和视觉风格。通过青虎AI使用，生成前自动上传参考图，提交后自动保存任务、查询进度并下载图片。适用于淘宝天猫主图、京东白底图、Amazon Listing主图、Shopee SKU图、TikTok Shop商品图、Temu广告素材、独立站Hero Image、广告KV、海报、带货、种草、社媒配图、产品精修、换背景与角色一致性内容。Use this skill for GPT Image 2 跨境多平台主图精修 当用户要求用 GPT Image 2 爆款电商主图、智慧模型（对外常称 GPT Image 2） 做电商图/主图/海报/文生图/图生图时必须触发。关键词：LinkPix、qhkit、青虎、GPT Image 2、GPT-Image、智慧模型、跨境主图精修、淘宝天猫主图、京东白底图、Amazon Listing、Shopee SKU、TikTok Shop、Temu广告、独立站Hero Image、广告KV、角色一致性。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher autoagc · joined 1 days agoInstalls 494Last detonated 12 h ago
$clawhub install linkpix-gpt-image-2
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-28 and scored it 89/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
npx invocation of non-well-known packageSKILL.md:98 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
LOW
Unpinned dependencySKILL.md:84 · Unpinned dependencyFix: Pin the exact version (`[email protected]`, `==1.2.3`) so every install gets the bytes that were reviewed.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:60 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06