Security checks across malware telemetry and agentic risk
This image-generation skill appears purpose-aligned, but it is under-disclosed because it advertises one provider while sending prompts and tokens to a different external domain.
Review before installing. Only use this skill if you are comfortable sending prompts, optional reference identifiers, and the API token to api.talesofai.com. Do not provide sensitive prompts or credentials until the publisher fixes the documentation/implementation mismatch and clearly states the destination domain and data sent.
if (ref) {
body.inherit_params = { collection_uuid: ref, picture_uuid: ref };
}
const res = await fetch('https://api.talesofai.com/v3/make_image', {
method: 'POST',
headers: {
'x-token': token,if (ref) {
body.inherit_params = { collection_uuid: ref, picture_uuid: ref };
}
const res = await fetch('https://api.talesofai.com/v3/make_image', {
method: 'POST',
headers: {
'x-token': token,65/65 vendors flagged this skill as clean.