by 安全扫描
OpenClaw
安全
high confidenceThe skill is internally consistent: it implements a CLI wrapper that sends prompts and a user-provided Neta API token to an external image-generation API and returns an image URL.
评估建议
This skill appears to do what it claims: it sends your prompt and a user-supplied Neta API token to api.talesofai.com and returns an image URL. Before installing or running, verify you trust the Neta service (api.talesofai.com / neta.art) and obtain a token from the official site. Prefer passing the token via an environment variable (as shown in README) rather than on the command line to avoid exposing it in process lists or shell history. If you need higher assurance, review the included polaro...详细分析 ▾
ℹ 用途与能力
Name/description claim an image-generation helper using the Neta API, and the code and README implement exactly that. Minor metadata mismatch: registry metadata lists no primary credential, but the runtime requires a Neta API token passed via --token (CLI or environment in examples). This is coherent but the metadata omission is worth noting.
✓ 指令范围
SKILL.md instructs running the included Node script with a prompt and token; the script only performs network calls to the described API and prints the resulting image URL. It does not read unrelated files, system config, or other environment variables.
✓ 安装机制
No install spec (instruction-only) and included code is a single small Node script; there are no downloads from unknown URLs or archive extraction steps. The provided npx/clawhub install hints refer to standard package installers.
ℹ 凭证需求
The script requires a single API token (passed via --token or examples using $NETA_TOKEN), which is appropriate for a remote image-generation service. Note: the registry declared no required env/primary credential even though a token is required at runtime; also passing secrets on the CLI can expose them in shell history or process listings — using an environment variable is safer.
✓ 持久化与权限
The skill does not request permanent presence (always:false) and does not modify other skills or system settings. It runs as a one-off CLI tool that makes outbound API requests.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/30
Initial release of the AI Polaroid Photo Generator. - Generate retro instant-film photos with vintage color, film grain, and '70s–'80s aesthetics. - Supports portrait, landscape, square, and tall formats. - Option to use reference images for style inheritance. - Requires a free Neta API token to use. - Easy CLI integration and quick start instructions included.
● Pending
安装命令 点击复制
官方npx clawhub@latest install polaroid-photo-generator
镜像加速npx clawhub@latest install polaroid-photo-generator --registry https://cn.clawhub-mirror.com
技能文档
AI polaroid photo generator — create retro instant-film photos with authentic vintage color, film grain, and '70s–'80s aesthetic. Perfect for nostalgic portraits, travel snapshots, lifestyle content, retro photo art, and old-school photography effects.
令牌
Requires a Neta API token (free trial at --token flag.
node