Anime Character Generator
v1.0.0Generate stunning full-body anime characters with custom outfits, hairstyles, and poses. Perfect for OC creation, fan art, visual novels, profile avatars, an...
⭐ 0· 137·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, README, SKILL.md, and the JavaScript implement the same capability: submit a text prompt to the Neta/TalesOfAI image API and return an image URL. The required API token and offered flags (--size, --ref) are appropriate for this purpose.
Instruction Scope
SKILL.md instructs running the included Node script with a --token flag. The runtime code only reads CLI args, calls https://api.talesofai.com endpoints to submit and poll an image job, and prints the returned image URL. It does not read unrelated files, other env vars, or exfiltrate data to unexpected endpoints.
Install Mechanism
No install spec is provided (instruction-only + small included JS file). Nothing is downloaded or written during install, so install risk is minimal.
Credentials
The skill requires an API token at runtime (passed via --token) which is appropriate and used only for the image API. As a minor metadata inconsistency, the registry metadata lists no required env vars/primary credential even though the SKILL.md and code require a token; this is likely an authoring omission rather than malicious behavior.
Persistence & Privilege
The skill is not configured as always-present. It doesn't modify other skills or system-wide agent settings. Default autonomous invocation is allowed (platform default) but the skill's requested footprint is limited.
Assessment
This skill expects you to provide a Neta/TalesOfAI API token (via --token) and will send your prompt to https://api.talesofai.com to generate an image and print a direct image URL. Before installing or running: (1) obtain the token from the official Neta site you trust, (2) be aware the token is sent to that external API (do not reuse a sensitive token elsewhere), and (3) if you have concerns, inspect the small included JS file (animecharactergenerator.js) yourself — it is short and straightforward. The only minor issue is that the registry metadata does not declare the required credential even though the runtime requires it; this is probably a documentation omission rather than a functional problem.Like a lobster shell, security has layers — review code before you run it.
latestvk973pfggptz196cnf1dvqp2fvx83tj7t
License
MIT-0
Free to use, modify, and redistribute. No attribution required.