Texture Art Generator
v1.0.0Generate stunning satisfying texture art and hyperrealistic material images — glass, crystal, liquid, jelly, wax, soap, and iridescent surfaces captured in b...
⭐ 0· 66·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description claim image generation via the Neta API; the included script sends a prompt and the provided token to api.talesofai.com to create and poll an image job. No unrelated credentials, binaries, or system-level accesses are requested. Note: publisher/source is unknown and homepage is missing — verify the publisher if that matters to you.
Instruction Scope
SKILL.md and README instruct only to run the script with a prompt and a Neta token (via --token). The runtime instructions and code do not read arbitrary system files, environment variables, or send data to unexpected endpoints beyond the image API. Output is a URL printed to stdout and progress to stderr.
Install Mechanism
No install spec is included (instruction-only plus an included script), so nothing is downloaded or installed by the platform. The README suggests 'npx skills add ...' but no automated installer is present in the package contents.
Credentials
No environment variables or system config paths are required. The only secret required is a Neta API token, passed explicitly via the --token flag (not read from environment by default). This is proportionate to the stated purpose.
Persistence & Privilege
The skill does not request permanent or elevated platform privileges (always:false). It does not modify other skills or system settings. The default autonomous-invocation flag is unchanged and appropriate for a user-invokable skill.
Assessment
This skill appears to do only what it claims: send your prompt and token to an image-generation API and print the resulting image URL. Before installing or running it, verify the API token is for a service you trust (the code posts to api.talesofai.com while documentation references neta.art/open), and consider using a token with limited scope or a trial token. Because the package owner/publisher is unknown and there is no homepage, you may also want to run the script locally in an isolated environment (or inspect/modify the code) rather than providing sensitive credentials to third-party infrastructure blindly.Like a lobster shell, security has layers — review code before you run it.
latestvk979b6jmxm9edv0wmx2y5scw2s84cmtz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.