Velora

Chat with AI companions on Velora (velora.cloudm8.net). Use for: (1) Testing Velora app functionality, (2) Interacting with AI companions, (3) Generating com...

Security Scan

The skill automates login and chat on velora.cloudm8.net (requiring account credentials and Playwright), but the registry metadata, runtime instructions, and the included script are inconsistent about how credentials are supplied — review before installing or providing real account credentials.

Purpose & Capability

The skill's stated purpose (automated chat/testing of Velora) legitimately requires a Velora account and browser automation (Playwright). However, the registry metadata lists no required environment variables or primary credential while SKILL.md explicitly requires VELORA_EMAIL and VELORA_PASSWORD — an incoherence between declared requirements and runtime instructions.

Instruction Scope

SKILL.md instructs the agent to log in, navigate, send messages, and collect image URLs from velora.cloudm8.net (all consistent with the stated purpose). However, the SKILL.md examples use process.env.VELORA_EMAIL/PASSWORD while the shipped script expects CLI arguments; this mismatch could confuse users and automation and indicates the documentation and code are not fully aligned. The instructions do not attempt to read unrelated system files or secrets beyond the Velora credentials.

Install Mechanism

No install spec is provided (instruction-only), and the script relies on Playwright/Chromium which the SKILL.md tells users to install via npm/npx. There are no remote downloads or opaque installers inside the skill bundle itself.

Credentials

The skill requires a Velora account email and password according to SKILL.md (sensible for browser automation), but the registry metadata did not declare these required env vars or a primary credential. The skill asks for plaintext account credentials (env vars or CLI args), which is proportionate to its function but raises typical credential-risk concerns — users should not provide primary/personal credentials and should use test accounts and unique passwords.

Persistence & Privilege

The skill does not request persistent/system-wide privileges, does not set always:true, and does not modify other skills or agent-wide config. Its runtime footprint is limited to running Playwright locally.

What to consider before installing

This skill appears to do what it claims (automate a browser to chat with Velora companions) but has inconsistencies you should address before installing or running it: (1) the registry declares no required env vars but SKILL.md asks for VELORA_EMAIL and VELORA_PASSWORD — confirm how the platform will supply credentials; (2) the README/sample code uses process.env, but the provided script expects CLI args — be careful which method you use; (3) avoid supplying your primary Velora credentials (use a dedicated test account and a unique password); (4) you will need to install Playwright and Chromium locally (npm install playwright + npx playwright install chromium); (5) verify the skill author/source (homepage is missing) before trusting it with credentials; and (6) inspect network activity when first running (or run in an isolated/test account) to ensure no unexpected data exfiltration occurs.

Velora Chat Skill

Automated testing and interaction with Velora AI companions (velora.cloudm8.net).

Prerequisites

Before using this skill, ensure:

1. Node.js installed (v18+)
2. Playwright installed:

   npm install playwright
   npx playwright install chromium
   

3. Valid Velora account credentials

Credentials Setup

Required Environment Variables

Create a .env file or set these variables:

# Velora Account (REQUIRED)
VELORA_EMAIL=[e-mail]
VELORA_PASSWORD=your-password

Required Credentials

Create a .env file or set these environment variables:

VELORA_EMAIL=[e-mail]
VELORA_PASSWORD=your-password

⚠️ Note: You must provide your own Velora account credentials. The skill does not include default credentials for security reasons.

Quick Start

Option 1: Using the Script (CLI)

# Basic chat
node scripts/velora-chat.js "[e-mail]" "password" "Lilith" "Hey, how are you?"

# With image generation request
node scripts/velora-chat.js "[e-mail]" "password" "Rin" "Send me your best photo!"

Usage:

node scripts/velora-chat.js <email> <password> <companion> <message>

Option 2: Direct in OpenClaw

The skill provides instructions for browser automation directly in conversations. Simply request:

• "Chat with [Companion Name]"
• "Test [Companion Name]'s image generation"
• "Generate [Companion Name]'s image"

Companion List

Available companions (28 total):

Name	Type
Rin	Tsundere
Lilith	Vampire/Succubus
Freya	Cozy warmth
Yuki	Snow princess
Miko	Sacred sin
Amara	Radiant temptress
Aoi	Sporty & flirty
And 21 more...

See references/companions.md for full list.

API Reference

Login Flow

const { chromium } = require('playwright');

const browser = await chromium.launch({ headless: true });
const page = await browser.newPage();

await page.goto('https://velora.cloudm8.net/login');
await page.fill('input[type="email"]', process.env.VELORA_EMAIL);
await page.fill('input[type="password"]', process.env.VELORA_PASSWORD);
await page.click('button:has-text("Sign In")');
await page.waitForURL('**/chat**', { timeout: 20000 });

Start Chat

// New chat
await page.click('text=Neuer Chat');
await page.click('text=Lilith'); // Companion name
await page.waitForTimeout(5000);

Send Message

const input = await page.locator('input[type="text"], textarea').first();
await input.fill('Your message');
await input.press('Enter');
await page.waitForTimeout(15000); // Wait for AI response

Get Generated Images

const images = await page.evaluate(() => {
  const imgs = document.querySelectorAll('img');
  return Array.from(imgs).map(img => img.src);
});
// Download: curl -s -o image.jpg "IMAGE_URL"

Troubleshooting

Issue	Solution
Login fails	Verify credentials, check account exists
Images not loading	Wait 15-20 seconds for generation
Chat won't start	Ensure proper navigation to /chat URL
Playwright not found	Run npm install playwright

Security Notes

• ⚠️ Never commit credentials to version control
• Use environment variables, not hardcoded values
• Test accounts recommended for automation

Testing Checklist

• Login flow works
• Companion list loads (28+ companions)
• Chat initiates properly
• Messages send successfully
• AI responses received
• Images generate correctly (512x768 / 1024x1024)
• Wallet/Gallery features (optional)