Miniature World Generator
v1.0.0AI miniature world and diorama art generator — create tilt-shift miniature scenes, tiny world illustrations, hyper-detailed diorama art, and shallow-depth-of...
⭐ 0· 31·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (miniature world image generation) matches the code and SKILL.md. The script POSTs prompts to api.talesofai.com and polls for results — exactly what an image-generation client would do. No unrelated credentials, binaries, or platform access are requested.
Instruction Scope
SKILL.md instructs running the provided Node script with a --token flag. The instructions and script only operate on the prompt, optional size/ref, and the token. They do not read local files, other env vars, or send data to endpoints outside the documented API.
Install Mechanism
No install spec — instruction-only with an included small JS script and package.json. No external downloads or extraction. Risk is low; running the script will perform network calls to the declared API host.
Credentials
No environment variables or secrets are required by the registry metadata; the script asks for a user-supplied API token via the --token CLI flag, which is a minimal and appropriate credential for an external image-generation API.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system configuration, and does not persist credentials. It simply issues network requests when invoked.
Assessment
This skill appears coherent and implements a simple client for the Neta image API. Before installing/running, verify you trust the API provider and the token source, never include sensitive personal data in prompts (the prompts are sent to an external service), and inspect the small JS file yourself if you want extra assurance. Note the script prints the returned image URL to stdout and does not store the token or image locally. Also ensure your Node runtime provides global fetch (Node 18+), or run in an environment that supports it.Like a lobster shell, security has layers — review code before you run it.
latestvk975c183pskazm0qgfd8t0y1x98448k0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.