gptnb-image
Generates images and videos using gptnb.ai, supporting layered image creation and video generation based on user prompts.
Install this skill
Security score
The gptnb-image skill was audited on Jun 10, 2026 and we found 17 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Access to hidden dotfiles in home directory
| 15 | 两个端点的 API key **单独维护**，文件分别放在 `~/.newmax/skills/gptnb-image/.api_key` 和 `.seedance_api_key`（详见各自的「API Key 配置」段落）。 |
Access to hidden dotfiles in home directory
| 99 | - `--api-key` 单次覆盖；优先级：CLI > `GPTNB_API_KEY` > `~/.newmax/skills/gptnb-image/.api_key`，详见下方「API Key 配置」 |
Access to hidden dotfiles in home directory
| 109 | 3. 文件 `~/.newmax/skills/gptnb-image/.api_key`（推荐持久化方式，权限建议 600） |
Access to hidden dotfiles in home directory
| 113 | > 前往 https://oneapi.gptnb.ai 注册账号并充值 → 在「令牌 / API Keys」页新建令牌 → **激活时务必选「api」分组**（更稳，超时/限流少）→ 写入 `~/.newmax/skills/gptnb-image/.api_key` 或 `export GPTNB_API_KEY=...` |
Access to hidden dotfiles in home directory
| 119 | mkdir -p ~/.newmax/skills/gptnb-image |
Access to hidden dotfiles in home directory
| 120 | echo "sk-xxx" > ~/.newmax/skills/gptnb-image/.api_key |
Access to hidden dotfiles in home directory
| 121 | chmod 600 ~/.newmax/skills/gptnb-image/.api_key |
Access to hidden dotfiles in home directory
| 273 | 3. 文件 `~/.newmax/skills/gptnb-image/.seedance_api_key`（推荐，权限 600） |
Access to hidden dotfiles in home directory
| 277 | > 前往 https://oneapi.gptnb.ai 注册账号并充值（建议 ≥200 元，视频消耗大）→ 在「令牌 / API Keys」页新建一个令牌 → **激活时务必选「api」分组**（更稳）→ 写入 `~/.newmax/skills/gptnb-image/.seedance_api_key` 或 `export GPTNB_SEEDANCE_API_KEY=...` |
Access to hidden dotfiles in home directory
| 281 | mkdir -p ~/.newmax/skills/gptnb-image |
Access to hidden dotfiles in home directory
| 282 | echo "sk-xxx" > ~/.newmax/skills/gptnb-image/.seedance_api_key |
Access to hidden dotfiles in home directory
| 283 | chmod 600 ~/.newmax/skills/gptnb-image/.seedance_api_key |
External URL reference
| 21 | 通过 `https://one-cn2.gptnb.ai/v1/images/generations` 调用 gpt-image-2 系列生成图像。脚本兼容 OpenAI 经典 image generation 接口风格。如需切换上游可用 `GPTNB_API_URL` 环境变量或 `--api-url` 参数覆盖。 |
External URL reference
| 113 | > 前往 https://oneapi.gptnb.ai 注册账号并充值 → 在「令牌 / API Keys」页新建令牌 → **激活时务必选「api」分组**（更稳，超时/限流少）→ 写入 `~/.newmax/skills/gptnb-image/.api_key` 或 `export GPTNB_API_KEY=...` |
External URL reference
| 161 | 通过 `https://one-cn2.gptnb.ai/seedance2/v3/contents/generations/tasks` 中转调用，兼容 Volcengine ark 创建/查询视频任务 API。`scripts/seedance.py` 处理「**异步任务流**」：POST 提交 → 轮询 GET → 下载产出 mp4。 |
External URL reference
| 261 | "video_url": "https://..." |
External URL reference
| 277 | > 前往 https://oneapi.gptnb.ai 注册账号并充值（建议 ≥200 元，视频消耗大）→ 在「令牌 / API Keys」页新建一个令牌 → **激活时务必选「api」分组**（更稳）→ 写入 `~/.newmax/skills/gptnb-image/.seedance_api_key` 或 `export GPTNB_SEEDANCE_API_KEY=...` |