ClawHub

Publish 3d Flag

v1.1.2

Render custom Aavegotchi 3D images from arbitrary trait and wearable combinations. Use when the user describes a synthetic or hypothetical gotchi look in pla...

⭐ 0· 115·0 current·0 all-time
by@aaigotchi
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Crypto
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the code and scripts: the repo contains a hosted-render client (posts to the Aavegotchi renderer API) and a local Unity fallback (Unity project + shell/JS/Python helpers). Files and dependencies (pngjs, node scripts, Unity C#) are appropriate for image composition and Unity batch rendering.
ℹ
Instruction Scope
SKILL.md and scripts stick to constructing JSON requests, calling the hosted API, and running Unity in batch mode when requested. A notable operational detail: Unity-mode executes provided C# editor code inside the Unity Editor (GotchiCustomRenderCLI.cs) which has full access to the local project filesystem while running; this is expected for a local renderer but is a higher-privileged action compared to pure CLI scripts. The scripts also read local wearable assets (PackageCache, wearables.tsv) and expect/node/npm/jq for hosted-mode background compositing — these behaviours are in-scope but worth confirming before running Unity mode on a hosted machine.
✓
Install Mechanism
There is no automatic install spec. The repo has a package.json (pngjs) and SKILL.md / README note that `npm install` plus node/jq are needed for the hosted background compositor; Unity must be installed separately for local render. No remote arbitrary downloads or URL-shortened installs are present.
✓
Credentials
The skill declares no required environment variables. Scripts optionally use UNITY_BIN when running Unity and reference typical repo paths; that is proportional (Unity binary only necessary for local mode). No credentials, API keys, or unrelated environment secrets are requested.
✓
Persistence & Privilege
The skill is not always: true, does not request to persist or modify other skills, and writes only render outputs and trace logs under the repo and /tmp/openclaw/Renders as described. Autonomous invocation is allowed by default but not combined with other concerning privileges.
Assessment
This package appears coherent for producing Aavegotchi renders. Before using it: (1) If you will use hosted mode, understand it posts requests to https://www.aavegotchi.com/api/renderer/batch and downloads the returned assets — only use if you trust that service. (2) If you plan to use Unity mode, install the specified Unity version and set UNITY_BIN; review the Unity C# scripts (GotchiCustomRenderCLI.cs) because editor scripts run with filesystem access when Unity runs in batch mode. (3) Run `npm install` in the repo root if you need non-transparent background compositing (pngjs is used). (4) No credentials are required by the skill, and outputs are written to Renders/ and /tmp/openclaw by default. If you will give this skill elevated or unattended access to a server, restrict it to environments where running Unity editor code is acceptable and audited.

Like a lobster shell, security has layers — review code before you run it.

latestvk972js11g882ahm2yxy5dw1f0n84x804

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments