Dnd Character Generator
v1.0.0Generate cinematic D&D character portraits and tabletop RPG hero art from a text description. Ideal for Dungeons & Dragons players, dungeon masters, TTRPG ca...
⭐ 0· 48·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill generates images by calling an external image API (api.talesofai.com / "Neta"). Network calls and an API token are expected for this purpose. Minor inconsistencies in documentation/domain names appear (SKILL.md and README reference neta.art/open while the code calls api.talesofai.com and uses an 'x-platform' header value 'nieta-app/web') — likely a cosmetic naming mismatch but worth verifying the intended service endpoint before using your token.
Instruction Scope
SKILL.md limits runtime instructions to running the included node script and passing a Neta API token via --token. It does not instruct the agent to read unrelated files, environment variables, or system configuration.
Install Mechanism
There is no install spec (instruction-only), but the package does include a JavaScript runtime file that will be executed locally. No external downloads or archive extraction are performed by the skill itself; code makes outbound HTTPS calls to the image API.
Credentials
The only secret required is the image API token passed via the --token CLI flag (not declared as an environment variable). That is proportionate to the skill's purpose, but passing tokens on the command line can expose them to shell history or other users via process listings — consider safer token delivery mechanisms.
Persistence & Privilege
The skill does not request persistent system privileges, does not set always:true, and does not modify other skills' configurations. Autonomous invocation is allowed by default (platform normal) but does not increase concern given the skill's limited footprint.
Assessment
This skill appears to do what it says: it runs a local Node script that posts your prompt to an external image API and returns an image URL. Before installing: (1) Verify you trust the remote service (api.talesofai.com / neta.art) and that the endpoint in the code matches the official provider; (2) avoid passing highly sensitive tokens on the command line (they can appear in shell history or ps listings) — prefer environment variables, a prompt, or short-lived tokens; (3) inspect the bundled dndcharactergenerator.js (already included) yourself or run it in a sandboxed environment if you have doubts; (4) if you need stronger assurance, contact the skill author or use tokens limited to image-generation scope only.Like a lobster shell, security has layers — review code before you run it.
latestvk978kkth04zv3n036rf2nd79rn83zj7m
License
MIT-0
Free to use, modify, and redistribute. No attribution required.