Visual Gen Ai Language
v1.2.1Maximum control over AI image generation — write structured VGL (Visual Generation Language) JSON that explicitly controls every visual attribute. Define exa...
⭐ 4· 1.5k·1 current·1 all-time
byGal Davidi@galbria
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description claim to convert natural-language image requests into deterministic VGL JSON for Bria/FIBO; SKILL.md and examples are consistent with that translator/templating purpose. The skill is instruction-only and does not request unrelated credentials or binaries.
Instruction Scope
SKILL.md instructs the agent to emit a single VGL JSON object and references the bria-ai skill for execution. However, the schema in references/schema-reference.md declares many object-level properties (pose, expression, clothing, number_of_objects, skin_tone_and_texture, etc.) as required for every object entry — contradicting the SKILL.md text which says those are only for human subjects or clusters. This mismatch makes the runtime instructions ambiguous and could force inclusion of irrelevant or fabricated data to satisfy validation.
Install Mechanism
Instruction-only skill with no install spec and no code files; nothing is written to disk or downloaded. Lowest-risk install posture.
Credentials
The skill declares no required environment variables, credentials, or config paths. It references a separate bria-ai skill for execution, but does not itself request keys or other secrets.
Persistence & Privilege
Does not request always:true, has no system config writes or other privileged persistence. Default autonomous invocation is allowed (platform default) but not combined with other red flags.
What to consider before installing
This skill appears to be a translator that outputs structured JSON for image generation and does not itself request credentials or install code — that part is coherent. The main red flag is an inconsistent JSON schema: the referenced schema marks many human-specific properties as universally required, while the SKILL.md describes them as conditional. That inconsistency can cause validation failures or force the generator to invent irrelevant values. Before installing/using: 1) test the skill with simple prompts to see the exact JSON it emits; 2) if you plan to execute generated VGL JSON via the bria-ai (or any) execution skill, ensure that execution skill requires and stores API credentials separately and review its permissions; 3) ask the author or maintainer to clarify/fix the schema requirements (make human-only fields optional) to avoid accidental inclusion of sensitive personal attributes; and 4) avoid sending real-person-identifying images or private data through the skill without verifying the downstream execution environment and privacy controls.Like a lobster shell, security has layers — review code before you run it.
latestvk97dt53phgqx0qs5kvpe1p20jd81qqg5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
