Skills/ClawHub/linkpix-lazada-image

linkpix-lazada-image@0.1.2

VERIFIED

Publisher claims: "帮助Lazada卖家、东南亚电商运营通过青虎AI完成“Lazada商品图”:支持生成Lazada平台规范的方形主图、节日大促海报、多语言卖点图、白底图、场景图。可调用Seedream 5.0、Nano Banana 2 等大模型,精准把握东南亚不同国家(如印尼、泰国、菲律宾)的节日文化元素,快速生成高适配度的本地化商品视觉素材。适用于Lazada、LazMall等平台的日常销售与大促活动。Use this skill for Lazada商品图, 方形主图, 大促海报, 多语言, 东南亚本地化, Seedream 5.0, Nano Banana 2 , AIGC图像生成, 跨境电商。通过青虎AI统一接入,支持素材上传、实时模型配置、任务轮询和结果下载。 当用户要求做Lazada 商品图、主图套图、详情图、活动图生成或该平台的主图/套图/详情图/活动图时必须触发。关键词:LinkPix、qhkit、青虎、Lazada商品图、LazMall、方形主图、大促海报、东南亚本地化、印尼、泰国、菲律宾。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher autoagc · joined 1 days agoInstalls 493Last detonated 13 h ago
$clawhub install linkpix-lazada-image
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-28 and scored it 89/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

LOW
Unpinned dependencySKILL.md:81 · Unpinned dependencyFix: Pin the exact version (`[email protected]`, `==1.2.3`) so every install gets the bytes that were reviewed.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:95 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:57 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06