The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands for environment verification, such as checking Python versions and detecting API key types using python3 -c. It also suggests the use of npx skills add for installing or updating related components from the vendor's repository.
[EXTERNAL_DOWNLOADS]: The skill fetches model configurations and catalogs from alioth-intl.alicdn.com, an Alibaba Cloud CDN domain. These downloads are used to synchronize model availability and settings with the vendor's remote infrastructure.
[DYNAMIC_EXECUTION]: The scripts/gossamer.py script uses subprocess.run to execute an internal update check script (check_update.py). This is used to notify the agent of available updates within the QwenCloud ecosystem.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied prompts and reference images which are passed to remote image generation models.
Ingestion points: User prompt string and reference image URLs/paths in scripts/image.py.
Boundary markers: Absent; prompts are directly interpolated into the API request JSON.
Capability inventory: Subprocess execution in gossamer.py, network operations to DashScope API and Alibaba CDN in qwencloud_lib.py, and file system writes for image downloads.
Sanitization: qwencloud_lib.py includes a sanitize_diagnostic function to redact URLs (containing signatures) from error messages, but does not sanitize user prompts sent to the model.

qwencloud-image-generation