Fantasy Map Generator
v1.0.0AI fantasy map generator for worldbuilders, tabletop RPG campaigns, and game designers. Create custom fantasy world maps, dungeon maps, kingdom maps, and lor...
⭐ 0· 76·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name, README, SKILL.md, and code all consistently target the Neta/TalesOfAI image-generation API (api.talesofai.com). One minor mismatch: the package expects you to run the included Node script with `node`, but the registry metadata lists no required binaries. Requiring a Neta API token (passed via --token) is proportionate to the stated purpose.
Instruction Scope
SKILL.md runtime instructions are narrow and align with the code: supply a prompt and a Neta token, optionally size/ref, then the script POSTs a make_image request and polls for a result URL. The instructions do not ask the agent to read unrelated files, system credentials, or send data to third-party endpoints other than api.talesofai.com.
Install Mechanism
There is no separate install spec that downloads arbitrary archives; the skill is instruction-first and includes self-contained source files (no external installers or unusual URLs). Installation via the skills registry (npx/clawhub) is expected and low risk from an install-mechanism perspective.
Credentials
The script requires a Neta API token (passed as a --token flag), which is appropriate. The registry metadata does not list this credential or the Node runtime as required fields — a small documentation/metadata omission but not a functional mismatch. No other secrets or environment variables are requested or accessed.
Persistence & Privilege
The skill does not request persistent/system-wide privileges (always is false) and does not modify other skills or system settings. It runs as a user-invoked command and can run autonomously per platform defaults, which is normal for skills.
Assessment
The skill appears to do exactly what it says: generate fantasy maps by calling the Neta/TalesOfAI image API and printing an image URL. Before installing, confirm you trust the package author (source/homepage is unknown in the registry), ensure you run it in an environment with Node.js available, and only provide a Neta token you control (the script sends it in an x-token header to api.talesofai.com). The registry metadata omission (not listing Node as a required binary or the token as a required credential) is a documentation gap — not evidence of malicious behavior, but worth noting if you expect stricter metadata. If you need stronger assurance, request a homepage or repository link from the publisher or review the package contents locally before running.Like a lobster shell, security has layers — review code before you run it.
latestvk978njswpwn9w49x46zjjk496n849v85
License
MIT-0
Free to use, modify, and redistribute. No attribution required.