ClawHub

Podcast Cover Generator

v1.0.0

Generate professional podcast cover art and show artwork for Spotify, Apple Podcasts, YouTube Music, Amazon Music, and Overcast. Create eye-catching 1400x140...

⭐ 0· 72·0 current·0 all-time
by@blammectrappora
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description: generate podcast cover art. Declared requirements: none (token provided at runtime). Actual behavior: sends text prompt + style suffix to api.talesofai.com image endpoints and returns an image URL. All required items are proportional and directly related to the stated purpose.
✓
Instruction Scope
SKILL.md instructs running the bundled Node script and passing a Neta token via --token. The code only reads CLI args, constructs a prompt, and POSTs to the Neta API. It does not read unrelated files, environment variables, or local configuration, nor does it exfiltrate data to unexpected endpoints.
✓
Install Mechanism
No install spec; the skill is instruction-only with a small included JS file and package.json (no dependencies). No downloads from untrusted URLs or archive extraction are used. The script requires network access to the Neta API (expected for this task).
✓
Credentials
The only secret required is a Neta API token (passed via --token). No other credentials, config paths, or unrelated environment variables are requested or referenced in code or docs.
✓
Persistence & Privilege
Skill is not always-enabled, does not request persistent system-level privileges, and does not modify other skills or system-wide configs. It prints a URL and exits; it does not store tokens locally.
Assessment
This skill appears to do exactly what it says: send your prompt to the Neta image API and return a generated-image URL. Before installing or running it, consider: (1) Trust the third party — prompts (which may include sensitive info) and the API token are sent to api.talesofai.com/neta.art; do not include secrets or private data in prompts. (2) The skill's source has no homepage and an unknown registry owner — if you need stronger assurance, review the small JS file yourself (it is included) or run it in an isolated environment. (3) Confirm rate/usage limits and billing on the Neta service and rotate the token if you ever expose it. Otherwise the code and instructions are proportionate and consistent with the stated purpose.

Like a lobster shell, security has layers — review code before you run it.

latestvk9780zmbbs6g4dv7azese42hd584ntt1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments