Avatar Generator
v1.0.0Generate customizable avatars in six styles with multi-platform export for social media including WeChat, QQ, Twitter, and Discord.
⭐ 0· 89·0 current·0 all-time
by@tobewin
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The SKILL.md, description, and embedded Python code all implement an avatar generator (letter, geometric, gradient, abstract, pattern, badge) and auto-exporting to multiple platform sizes — consistent with the stated purpose. Minor mismatch: registry metadata earlier declared no required binaries, but SKILL.md metadata lists python3 as a required binary.
Instruction Scope
Instructions and the included Python code perform only local image rendering and file operations (Pillow, drawing, randomization, resizing, saving). The code attempts to load system font files (paths under /System/Library and /usr/share/fonts), which means it will read system font files if present. It does not reference network endpoints or request secrets. The gradient routine imports numpy, but the SKILL.md dependency text only lists Pillow — that dependency mismatch is a runtime correctness issue (not a direct security red flag) but worth fixing.
Install Mechanism
This is an instruction-only skill with no install spec; nothing is auto-downloaded or written by an installation step. SKILL.md suggests 'pip install pillow' but provides no automated install. No external URLs or archive downloads are used.
Credentials
The skill does not request any environment variables, credentials, or config paths beyond reading typical system font paths. No tokens/keys/passwords are requested — proportional to its purpose.
Persistence & Privilege
always is false and there are no special persistence requests. The skill does not attempt to modify other skills or agent system settings.
Assessment
This skill appears to be a straightforward local avatar generator, but take these precautions before using it: (1) The skill source is unknown and has no homepage — review the SKILL.md and embedded code yourself. (2) Ensure you have Python 3 installed and install required packages: at minimum Pillow, and also numpy (the code imports numpy for gradients). (3) The code will read system font files (to render text) and will write image files to disk — run it in a safe/sandboxed environment if you are concerned about file access. (4) There are minor metadata inconsistencies (registry says no required binaries while SKILL.md lists python3; dependency list omits numpy) — fix these before running to avoid runtime errors. (5) No network calls or credential access were found in the provided files, but if the skill is later modified to add export/upload features, re-check for endpoints or secret usage.Like a lobster shell, security has layers — review code before you run it.
latestvk97f674cta196eybkx59cjrefx83mmca
License
MIT-0
Free to use, modify, and redistribute. No attribution required.