Waifu Generator Skill
v3.0.0Generate waifu generator ai image generator images with AI via the Neta AI image generation API (free trial at neta.art/open).
⭐ 0· 157·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, README, SKILL.md, and the JS code consistently implement an image-generation CLI that submits prompts to the Neta/TalesOfAI API (api.talesofai.com) and returns an image URL. Nothing in the files asks for unrelated cloud credentials or unrelated system access.
Instruction Scope
Runtime instructions tell the user to run the CLI with a --token flag; the code only reads CLI args, constructs JSON, POSTs to the API, polls for results, and prints the image URL. The instructions do not request reading other files, environment secrets, or sending data to any endpoint other than the declared API domain.
Install Mechanism
There is no install spec in the package (instruction-only installation). SKILL.md/README suggest 'npx skills add TomCarranzaem/waifu-generator-skill' and a 'clawhub install' command, but the registry owner ID in the metadata doesn't match the referenced GitHub-like username — this is a potential source-of-origin mismatch to verify before installing from external sources. No remote downloads or extract steps appear in the shipped code.
Credentials
The skill requires a Neta API token but expects it via the --token CLI flag (not an environment variable). The registry metadata lists no required env vars or primary credential; this is reasonable because the token is supplied at runtime, but users should note the token is transmitted to api.talesofai.com as an 'x-token' header.
Persistence & Privilege
The skill does not request persistent privileges, does not set always:true, and does not modify other skills or system configuration. It runs as a simple CLI tool and exits.
Assessment
This skill appears to do exactly what it claims: submit prompts to the Neta/TalesOfAI image API and return an image URL. Before installing or running it: (1) verify the source you install from matches the skill you reviewed (SKILL.md suggests a username that does not match the registry owner ID), (2) create and use a limited-scope/test API token rather than a high-privilege credential, (3) be aware that any prompt and the token are sent to api.talesofai.com, so avoid including secrets in prompts, and (4) if you are uncertain, run the script in an isolated environment (container/VM) and review the code locally before executing.Like a lobster shell, security has layers — review code before you run it.
latestvk97af71ee00bee7pj0py49k4w583pgtg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.