Bento Grid Generator
v1.0.0Generate beautiful bento grid layouts for social media posts. Create Instagram/Twitter cards with statistics, calendars, music visualization, and custom layo...
⭐ 1· 341·0 current·0 all-time
by@limoxt
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (bento-style social-media images) aligns with the actual instructions and required runtime (python3 + Pillow). The requested binary (python3) and dependency (Pillow) are appropriate for image generation.
Instruction Scope
The SKILL.md contains explicit python -c snippets that create images and save them to /tmp (bento_grid.png, stats_card.png, music_card.png). The scripts do not call external network endpoints, read arbitrary user files, or access environment variables. They attempt to load a macOS system font (/System/Library/Fonts/Helvetica.ttc) with a fallback to Pillow's default font — on non-macOS systems the fallback will be used. Writing to /tmp is expected but may be visible to other local users on multi-user systems.
Install Mechanism
This is an instruction-only skill (no install spec, no downloaded code). The SKILL.md metadata lists Pillow under pip requirements, which is reasonable, but there is no remote installer or archive fetching. Risk is low provided the runtime has Python+Pillow available.
Credentials
No environment variables, credentials, or config paths are requested. The scripts do not reference secrets or unrelated system configuration.
Persistence & Privilege
The skill does not request always: true, does not modify other skills or system-wide settings, and has no persistent installation behavior described.
Assessment
This skill appears coherent and low-risk for typical use: it runs local Python+Pillow code to produce images and saves them to /tmp. Before installing, ensure you are comfortable with the agent executing Python commands locally and that your runtime has Python3 and the Pillow package available (the SKILL.md references Pillow). Note the scripts try to use a macOS font path and fall back to a default font on other systems. Also be aware that files written to /tmp on multi-user systems may be accessible to other users — if that matters, change the output path. No credentials or network access are required by the skill. If you want extra caution, review the SKILL.md code yourself and run the snippets in a sandbox or isolated environment first.Like a lobster shell, security has layers — review code before you run it.
latestvk978hqawjqc7sqzbw6snbyq7ws820z2p
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binspython3