Yearbook Photo Skill

This skill appears to do what it claims: generate yearbook-style images via a Neta/TalesOfAI API. Before installing: (1) Confirm the required env var NETA_TOKEN is present and valid (the package declares it required even though the registry summary omitted it). (2) Verify you trust the API endpoint (the code calls https://api.talesofai.cn) and are comfortable sending prompt text and the token to that host. (3) Do not paste your token into public logs or public prompts; prefer environment variables. (4) Because there is no install script, you can safely inspect the yearbookphoto.js file locally — it only performs HTTP calls and prints a URL. (5) If you plan to allow autonomous agent invocation, be aware the skill will be able to call the external API whenever the agent chooses; restrict that if you don't want automated external requests. If you want higher assurance, ask the publisher to correct the registry metadata to include NETA_TOKEN and confirm the canonical API host.