Tpt Generate Cover

Generate a TPT cover using the AI Studio DinoCover tool and save it locally with the book title as filename.

This skill will launch a browser profile named 'geminibuild' that must already be logged into Google, and it will read/write files in specific local folders (E:\AI\openclaw-tpt\...). The registry metadata does not declare those config paths or the need for a logged-in profile — that's an inconsistency. Before installing or running: (1) verify the geminibuild profile is dedicated and contains no sensitive personal or organizational data (use a throwaway or limited account if possible); (2) confirm the input/output paths are correct and contain only intended files; (3) run the skill in an isolated VM or dedicated workspace if you worry about exposing Google session cookies or Drive access; (4) ask the skill author to update metadata to list required config paths and to document precisely what the agent will access; and (5) if you cannot verify those things, treat the skill as untrusted and avoid exposing high-value accounts or data to it.

Type: OpenClaw Skill Name: tpt-generate-cover Version: 1.0.0 This skill involves significant capabilities, including browser automation to interact with a Google AI Studio tool, uploading local files, and downloading generated content. It also performs local file system operations (reading input TXT/PNGs from `E:\AI\openclaw-tpt\input\` and writing output PNGs to `E:\AI\openclaw-tpt\output\COVER\`). While `SKILL.MD` includes explicit safety boundaries, the use of user-provided input (TITLE from the TXT file) for filename generation without explicit sanitization presents a path traversal vulnerability. The combination of browser control and file system access, coupled with the prompt-driven nature of the AI agent, creates a substantial attack surface for potential prompt injection to override safety instructions or exploit file system vulnerabilities, classifying it as suspicious.