gpt-image-2
面向 GPT Image 2 的图像生成 / 编辑技能。可在 3 种环境下使用：(A) Garden 本地模式，通过 OpenAI 兼容接口直接出图并落盘；(B) Host-Native 模式，把本 Skill 当作提示词工程指引，把渲染好的 prompt 交给宿主 Agent 自带的图像工具出图；(C) Advisor 模式，宿主无任何图像工具时退化为高质量 prompt 顾问。涵盖 18 大类、80+ 个结构化模板，覆盖海报 / UI / 产品 / 信息图 / 学术图 / 技术架构图 / 漫画 / 头像 / 流程板 / 电影分镜 / IP 周边 / 编辑工作流等场景。
77%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Medium
Suggest reviewing before use
Fix and improve this skill with Tessl
tessl review fix ./skills/gpt-image-2/SKILL.mdW009: Direct money access capability detected (payment gateways, crypto, banking).
What this means
The skill is specifically designed for direct financial operations, giving the agent the ability to move money or execute financial transactions — such as payment processing, cryptocurrency operations, banking integrations, or market order execution.
Why it was flagged
The skill provides image generation and editing capabilities via OpenAI-compatible endpoints (`POST /images/generations` and `POST /images/edits`) in its Mode A ("Garden") workflow, using scripts like `generate.js` and `edit.js`. This constitutes an in-scope financial operation (service usage calls to OpenAI APIs). However, these API operations rely solely on standard API keys (`OPENAI_API_KEY`) passed in the environment/configuration without any independent access controls or external validation enforced by the skill itself, placing it in the direct operation category without qualifying independent controls.
- Repository
ConardLi/garden-skills
- Revision
7a6d5a7
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.