ClawHub

Monet AI

v1.0.9

Monet AI - Comprehensive AI content generation API for AI agents. Video generation (Sora, Veo, Doubao Seedance, Wan, Hailuo, Kling), image generation (GPT-4o...

⭐ 1· 734·0 current·0 all-time
by@seekton
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
✓
Purpose & Capability
The name/description describe a unified content-generation API and the SKILL.md contains concrete curl/fetch examples calling https://monet.vision using MONET_API_KEY — the required credential and described functionality align.
✓
Instruction Scope
Instructions are limited to calling monet.vision endpoints, creating tasks, polling status, and using an idempotency key. The skill does not instruct reading unrelated files, other env vars, or transmitting data to third-party endpoints beyond monet.vision.
ℹ
Install Mechanism
This is instruction-only (no install). That's low technical risk, but the skill has no source repository or homepage listed and the registry metadata owner is opaque — lack of provenance is a trust concern even though nothing is written to disk.
✓
Credentials
Only MONET_API_KEY is required and used in examples; the credential request is proportionate to a web-API integration. No unrelated secrets or config paths are requested.
✓
Persistence & Privilege
The skill is not always-enabled, does not request system persistence, and contains no install steps that modify agent/system configuration.
What to consider before installing
The skill's behavior (curl/fetch to monet.vision using MONET_API_KEY) matches its description, but the package has no listed homepage or source repo and claims to expose many third-party models — that reduces trust. Before installing: verify monet.vision (look for official docs, company info, and a privacy/billing policy), ensure the API key you provide has least privilege (use a dedicated key with limited scope and billing limits), avoid sending sensitive PII in prompts, monitor usage and billing after enabling, and be prepared to rotate/revoke the key if you see unexpected activity. If you require stronger assurance, ask the publisher for a source repo or formal documentation and test with a low-privilege test account first.

Like a lobster shell, security has layers — review code before you run it.

latestvk979qzs2xpetwgr6d0t69tncj1821ez8

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvMONET_API_KEY

Comments