Security audit
Security checks across malware telemetry and agentic risk
This is a straightforward image-generation skill that uses a third-party API, but users should handle prompts and API tokens carefully.
Install only if you are comfortable sending your image prompt, optional reference UUID, task metadata, and Neta/TalesOfAI API token to the documented remote image service. Prefer a limited-purpose token and avoid placing real secrets in shared shell history, logs, or CI output.
console.error(`→ Submitting job (${dims.width}×${dims.height})...`);
const submitRes = await fetch('https://api.talesofai.com/v3/make_image', {
method: 'POST',
headers,
body: JSON.stringify(body),console.error(`→ Submitting job (${dims.width}×${dims.height})...`);
const submitRes = await fetch('https://api.talesofai.com/v3/make_image', {
method: 'POST',
headers,
body: JSON.stringify(body),for (let attempt = 0; attempt < 90; attempt++) {
await new Promise((r) => setTimeout(r, 2000));
const pollRes = await fetch(`https://api.talesofai.com/v1/artifact/task/${taskUuid}`, {
headers,
});65/65 vendors flagged this skill as clean.
No suspicious patterns detected.