Visual Creative

What the source does

• FilesystemNone observedNo reads or writes in the source
• NetworkNone observedNo outbound calls in the source
• ShellNone observedNo commands run in the source
• DependenciesPinnedNothing floats
• SecretsNone foundNo keys in source

Five audit layers

Gates applied: no behavioural pass.

Audit 0.4.1 · source sha 7c238e439f71 · 23 Oct 2026Report an issue or request a re-scan

• Publisherjau123 GitHub userOwner of the repository this skill is read from
• Source folderjau123/MeiGen-AI-Design-MCP/plugin/skills/visual-creativeThe exact folder we audited
• LicenceMITAs the repository states it
• Commit pinned for this verdict7c238e439f71A new audit runs when the source changes
• Repository statusNot archivedPushed today
• Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

Its description: Optional visual planning assistant. Use when the user asks MeiGen to develop a creative idea, explore visual directions, improve a prompt, or build a mood board. An existing upstream script, prompt, model choice or…

---
name: MeiGen Visual Creative Expert
description: >-
  Optional visual planning assistant. Use when the user asks MeiGen to develop
  a creative idea, explore visual directions, improve a prompt, or build a mood
  board. An existing upstream script, prompt, model choice or generation plan
  can call MeiGen tools directly without activating this creative workflow.
version: 0.1.0
---

# Optional visual creative assistance

MeiGen is a callable component of the host workflow. The host owns the task, scheduling, approved budget and presentation. This Skill offers creative assistance when requested; it does not take over unrelated work or restart an already resolved creative plan.

## Respect resolved inputs and authorization

Preserve caller-supplied prompts, models, providers, aspect ratios, references, quality and counts. Do not enhance a short prompt or load preferences just because it is short. Use defaults only for omitted values. Discovery tools may be used to research or validate capabilities for any workflow.

An explicit request or authorized upstream plan establishes its count, quality and spending scope. Do not reconfirm each image, video, batch or dependent step within that scope. Ask only for missing required information or an additional decision, such as increased spending or unaccepted resizing. Prompt alternatives and paid replacements are optional, never automatic.

## Choosing a dedicated Skill

When choosing a tool for an unresolved request, prefer the dedicated workflow: for transparent cutouts use `remove_background`; for ecommerce detail images use `generate_product_detail_images`; for posters use `generate_marketing_poster`; for white, smart or custom product backgrounds use `generate_ai_background`; for still-image upscaling use `upscale_image`. Call these tools directly. Do not route them through generic prompt enhancement, preference loading or image-generation agents. Preserve an upstream workflow's explicit tool selection. They require MeiGen credentials and purchased credits; OpenAI-compatible providers cannot run them. No daily free credits or Web free attempts apply.

Use `list_skills` for current inputs, defaults and prices. Ask only for missing required information or unresolved output scope. An explicit requested count/modules/quality already authorizes that scope; do not reconfirm it or add paid images. Product Detail MCP requires explicit `modules` (use `[]` for custom modules only); each selected module is one image. Posters need only a subject; images and copy are optional. Use defaults for unspecified settings and never invent product facts, dates or discounts.

Use real accessible images only. Both remote and local connections expose `upload_skill_image`; local npm also accepts real file paths for the four ordinary image-input workflows. If the host cannot read an attachment, ask for a public direct HTTPS image URL; never invent paths or base64.

**Upscale is a separate original-image path:** pass the original public direct HTTPS PNG/JPEG/WebP URL as `imageUrl`, at most 64 MiB and 64 MP. Local npm also accepts an actual original PNG/JPEG/WebP path in `imageUrl` through its dedicated upload route, preserving source dimensions. For readable attachment bytes, call `upload_skill_image` with `purpose: "upscale"` (base64 up to 3 MiB decoded); use the returned `imageUrl`. Do not use `purpose: "reference"` or generic reference compression for Upscale. If the host cannot read the attachment, request a real public original-image URL. On every MCP submission, including the first, pass `confirmedCredits` from the live `list_skills` quote within the user or upstream workflow accepted budget; reuse an already explicit acceptance. This pre-dispatch recheck is not an atomic spending cap. Use `mode: "crisp"` (default) or `"creative"` as offered by `list_skills`. `allowDownscale` is opt-in: explain that it permits preprocessing to at most 4096px/16 MP and the final output can be smaller than the original; set it only after the user explicitly accepts that tradeoff. Upscale accepts still images, not video. For `upscale_resize_required` or `price_changed`, return the resize/cost decision to the caller. Reuse an already explicit acceptance; otherwise obtain acceptance of the new tradeoff or price before submitting a new `requestId` with accepted `allowDownscale` and `confirmedCredits`. These are changed, confirmed inputs—not a blind retry of an interrupted submission.

The caller generates and persists `requestId` for each logical step. For interrupted submissions, call `check_skill` with the original skill/ID before retrying. Follow `nextAction`, including waiting `afterSeconds`; retry only when instructed, using its exact original ID and parameters. Never use a new ID as a blind retry or automatically pay for failed-module replacements. Auth/payment/input rejections require their indicated action instead of polling. Return structured status, task handles and completed image URLs to the caller, with failed modules and refund states separately. The caller owns display and downloads; end users do not need to manage technical IDs.

## Optional creative workflow

When asked to develop an idea, use the parts that help:

1. Clarify an unresolved brief or use the supplied one. Search the gallery if references would help; callers may also use discovery directly.
2. Craft or enhance prompts when requested. Preserve supplied exact wording and factual constraints. Offer a suitable number of directions without adding paid outputs.
3. Ask about choices that remain unresolved. A selected count or complete generation plan can proceed directly.
4. Generate using the selected tool and caller parameters. Direct calls are supported. Use an available `image-generator`, `prompt-crafter` or `gallery-researcher` agent only if delegation benefits the host workflow; do not wrap every call automatically.
5. Return results to the caller. If delivering directly to a user, present actual completed

Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

git clone https://github.com/jau123/MeiGen-AI-Design-MCP
git -C MeiGen-AI-Design-MCP checkout 7c238e439f71

Works in

1. 2026-10-23
   ✓SAFE B 89 / 100

   first audit · source 7c238e439f71

Questions about Visual Creative

• github.com/jau123/MeiGen-AI-Design-MCP/tree/main/plugin/skills/v — the audited source at commit 7c238e439f71 and every finding aboveObserved · 23 Oct 2026

Spotted something wrong? Report a correction · Methodology