[EminBudak]

Pull Request Checklist

• I have read and followed the CONTRIBUTING.md guidelines.
• I have read and followed the Guidance for submissions involving paid services.
• My contribution adds a new instruction, prompt, agent, skill, workflow, or canvas extension file in the correct directory.
• The file follows the required naming convention.
• The content is clearly structured and follows the example format.
• I have tested my instructions, prompt, agent, skill, workflow, or canvas extension with GitHub Copilot.
• I have run npm start and verified that README.md is up to date.
• I am targeting the main branch for this pull request.

---

Description

Adds wiro-image, a skill for generating images through the Wiro AI MCP server (https://mcp.wiro.ai/v1). Most of it is about choosing a model from the Wiro AI catalog and keeping the cost in view:

• It shortlists models with the server's recommend_model and search_models tools, then reads the pick with get_model_schema, since parameter ids differ from model to model.
• Before each paid run it writes one line with the model, the settings that change the price, and the expected cost. It asks first when the estimate is over 1 USD, the job makes more than four files, or the price is only known after the run.
• It follows the server's nextAction until the job ends and never starts a paid job again on its own.
• On request it saves the files into the project's existing asset folder (such as public/images/) without overwriting anything.

The existing generate-image and nano-banana-pro-openrouter skills call fixed models with a provider API key. This one is for Wiro AI users who want to pick between models and see the price before each run.

It needs the Wiro MCP server, connected by signing in with a Wiro AI account or with a Wiro AI API key. Runs are billed per run from the user's Wiro wallet. Searching models and reading schemas and prices is free.

---

Type of Contribution

• New instruction file.
• New prompt file.
• New agent file.
• New plugin.
• New skill file.
• New agentic workflow.
• New canvas extension.
• Update to existing instruction, prompt, agent, plugin, skill, workflow, or canvas extension.
• Other (please specify):

---

Additional Notes

I work on Wiro AI. This is the wiro-image skill from https://github.com/wiroai/Wiro-Skills (MIT), with one word removed from a list of model variants.

Checks run locally: npm run skill:validate, npm start (adds the README row), npm run plugin:validate, vally lint (2 of 2 checks passed) and codespell.

The skill was run in Claude Code against the live Wiro MCP server: it shortlisted models, read the schema of Flux Fast Text to Image, wrote the cost line, ran it and saved the image under public/. The source repo README has screenshots. It has not been run in GitHub Copilot yet, so that box is unticked.

The skill and this PR were written with AI help (Claude Code).

---

By submitting this pull request, I confirm that my contribution abides by the Code of Conduct and will be licensed under the MIT License.

🤖 Generated with Claude Code

[github-actions]

🚦 Submission status: 👀 Ready for review

Risk tier: merge-risk:high — Privileged execution, automation, or review-policy change
Required to merge: passing submission-gate checks plus 1 approval from reviewers with write access, including a maintainer with admin or maintain permission.

Why this tier

• Label needs-review:HIGH flags a high contributor-risk signal

Automated checks

Check	Status	Details
Line endings	✅ Passed	Passed · logs
Spelling	✅ Passed	Passed · logs
Generated README consistency	✅ Passed	Passed · logs
Skill validation	✅ Passed	Passed · logs
Skill lint (vally)	✅ Passed	Passed · logs
Risk scan	✅ Passed	Passed · logs
Contributor reputation	✅ Passed	Passed · logs
Duplicate resource scan	✅ Passed	Passed · logs
PR quality signal	⏭️ Skipped	Skipped by its workflow · logs

Review

• Approvals: 0/1
• Assigned reviewer: not assigned yet — comment /request-review to ask for one
• Review target date: not set
• Still needed: 1 more approval(s); an approval from a maintainer with admin or maintain permission
• The core-maintainers pool is not staffed yet; an approver with admin or maintain permission is required instead.

Commands

Command	Who	What it does
/rerun-checks	PR author, maintainers	Re-runs failed or incomplete checks and re-evaluates this gate
/request-review	PR author, maintainers	Asks the review rotation to assign a reviewer (adds needs-reviewer)

_{Updated for c33a859 · gate run · This comment is maintained automatically — see submission gate docs.}

[github-actions]

🔒 PR Risk Scan Results

Scanned 1 changed file(s).

Severity	Count
🔴 High	0
🟠 Medium	0
ℹ️ Info	0

✅ No matching risk patterns were detected in changed files.

This is an automated soft-gate report. Findings indicate review targets and do not block merge by themselves.

[github-actions]

🔴 Contributor Reputation Check: HIGH risk

Check	Risk
Profile	HIGH
Credential audit	NONE

Maintainers: please review this contributor before merging.
See the workflow run for full details.
Automated check powered by AGT.

[github-actions]

🔍 Vally Lint Results

✅ All checks passed

Scope	Checked
Skills	1
Agents	0
Total	1

Severity	Count
❌ Errors	0
⚠️ Warnings	0
ℹ️ Advisories	0

Summary

Level	Finding
ℹ️	✅ wiro-image (2/2 checks passed)
ℹ️	✓ [spec-compliance] All 1 skill(s) are spec-compliant.
ℹ️	✓ spec-compliance: All spec checks passed.
ℹ️	✓ [valid-refs] All file references across 1 skill(s) are valid.
ℹ️	✓ valid-refs: All file references resolve to existing files within the skill directory.
ℹ️	1 skill(s) linted, 1 passed

Full linter output

### Linting skills/wiro-image
✅ wiro-image (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.

1 skill(s) linted, 1 passed

[Copilot]

🟡 Changes recommended

The download workflow permits shell execution, local-file exposure, and active-content injection into public assets, while the generation step also drops explicitly requested schema-supported settings.

4 open issues

• Validate downloaded content before saving to public assets · New
• Restrict downloads and redirects to HTTPS · New
• Avoid shell interpolation when downloading returned paths · New
• Preserve all explicitly requested schema-supported settings · New

What changed in this PR

Adds wiro-image to the skill catalog for generating images through Wiro AI, with model selection and pricing guidance rather than a fixed-model workflow.

Changes:

• Defines model discovery, schema-based configuration, cost confirmation, and task tracking.
• Adds optional saving into existing project asset folders.
• Registers the skill in the generated skills index.

File	Description
skills/​wiro-image/​SKILL.md	Adds the Wiro image-generation and saving workflow.
docs/​README.skills.md	Adds the skill’s description and installation command.

_{Review effort: Balanced (dynamic)}

[aaronpowell]

Thanks for contributing this skill. We can’t include it in this collection because its only image-generation path requires Wiro’s hosted MCP server and a Wiro account or API key, and skills/wiro-image/SKILL.md says paid runs spend the user’s Wiro wallet. The upstream wiroai/Wiro-Skills README likewise describes these skills as a way to use Wiro’s hosted service and says each model run is paid from a Wiro wallet; its license identifies Wiro AI as copyright holder, and your PR notes that you work on Wiro AI. That makes this a free-skill-to-paid-connector funnel rather than a standalone Copilot resource, so wording changes would not address the fit issue.