Vintage Poster Generator — Vintage工具
v1.0.1[AI辅助] AI vintage poster generator — create retro art prints, old-school travel posters, 1950s-1970s style illustrations, antique advertising art, and nostalgic wal...
0· 85·0 当前·0 累计
by 安全扫描
OpenClaw
安全
high confidenceThe skill's files and runtime instructions are consistent with an image-generation helper that calls a third‑party Neta API and only requires a user-provided API token; nothing requests unrelated credentials or system access.
评估建议
This skill appears coherent: it sends your prompt and the token you supply to api.talesofai.com to generate images. Before installing, verify you trust the upstream service (neta.art / api.talesofai.com) and avoid reusing any high‑privilege or long‑lived credentials as the token. You can also review the simple JS file (vintagepostergenerator.js) yourself (it is short and readable) or run it in an isolated environment. If you need stronger assurance, ask the publisher for a provenance/source URL ...详细分析 ▾
✓ 用途与能力
Name/description, README, SKILL.md, and the JS code all point to the same behavior: send a text prompt (and optional reference UUID) to the Neta image API (api.talesofai.com) and return an image URL. The required inputs (an API token or CLI flag) and network calls match the stated purpose.
✓ 指令范围
Runtime instructions are limited to running the included Node script with a prompt and a --token flag. The code only issues HTTP requests to api.talesofai.com and does not read local files, other environment variables, or attempt to exfiltrate unrelated data.
✓ 安装机制
There is no install spec; this is effectively an instruction + script package. The README suggests npx/clawhub but nothing is downloaded by the skill at runtime and no archives or opaque URLs are used.
ℹ 凭证需求
The skill requires a Neta API token provided via the --token flag (documented in SKILL.md and README). The registry metadata lists no required environment variables, which is acceptable because the token is passed on the CLI rather than as an env var. The single token request is proportional to the functionality.
✓ 持久化与权限
always is false and the package does not request persistent/automatic inclusion or modify other skills or system settings. The agent can invoke it autonomously (default), which is normal for skills, but there is no extra privilege requested.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/29
- Updated package information in package.json. - No changes to functionality or user-facing features.
● 无害
安装命令 点击复制
官方npx clawhub@latest install vintage-poster-generator
镜像加速npx clawhub@latest install vintage-poster-generator --registry https://cn.clawhub-mirror.com
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制