Wallpaper Claw Skill
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears to do what it says: run a local Node script that sends your prompt and Neta token to the Neta image-generation API, with no evidence of hidden or unrelated behavior.
This looks like a purpose-aligned image-generation skill. Before installing, be comfortable with running the included Node script and sending your prompt plus Neta API token to api.talesofai.com. Do not paste a token you cannot revoke, and consider using a dedicated token for this skill.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone running the skill must provide a Neta API token, which may allow image-generation activity under that account.
The user-supplied Neta token is used as an API credential in requests to the image-generation service. This is expected for the stated purpose, but users should understand that the token authorizes API use.
const headers = {
"x-token": token,
"x-platform": "nieta-app/web",
"content-type": "application/json",
};Use a dedicated or limited-scope Neta token if available, avoid sharing the token, and rotate it if it is exposed in shell history or logs.
Installing and using the skill allows the agent to invoke the documented Node script to make network requests to the Neta API.
The skill is designed to run an included JavaScript file through the shell. This local execution is disclosed and central to the wallpaper-generation purpose, but it is still a capability users should notice.
tools: Bash ... node wallpaperclaw.js "your description here" --token YOUR_TOKEN
Review the included scripts before use and only run the documented commands with prompts and tokens you intend to send to Neta.