← Back to Skills Marketplace
266
Downloads
1
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install sillytavern-cards-skill
Description
Import and roleplay with SillyTavern-compatible character cards (TavernAI V2/V3 PNG format)
Usage Guidance
This skill is internally consistent with its stated purpose and the included Node extractor is simple and readable. However, importing cards downloads third-party data and writes it directly into your agent's SOUL.md (system identity) and MEMORY.md (persistent memory). Because card JSON can include fields like system_prompt and post_history_instructions, importing unreviewed cards can change your agent's behavior (prompt injection) or cause surprising actions. Recommended precautions before installing/using: 1) Back up ~/.openclaw/SOUL.md and MEMORY.md (the skill suggests doing this). 2) Prefer importing local files you trust or manually review the JSON output from node extract-card.js before saving. 3) Avoid blindly importing cards from unknown URLs; download to a local file and inspect the JSON first. 4) Note that README/SKILL.md claim WEBP support but the extractor only verifies PNG signatures — treat WEBP imports cautiously. 5) If you allow autonomous agent invocation, be aware that a malicious card could persistently influence the agent across sessions. If you want, I can highlight the exact lines in extract-card.js that you should audit or show an example safe workflow for reviewing a downloaded card before import.
Capability Analysis
Type: OpenClaw Skill
Name: sillytavern-cards-skill
Version: 0.1.0
The skill bundle enables importing SillyTavern character cards by overwriting the agent's core identity file (SOUL.md) and modifying its memory (MEMORY.md). While aligned with the stated purpose of roleplay, the SKILL.md instructions utilize shell commands (curl, node) that are vulnerable to command injection if user-provided URLs or character names are not strictly sanitized by the AI agent. Additionally, the 'Play' mode instructions explicitly direct the agent to ignore all other system skills and commands, which constitutes a high-risk override of standard agent behavior. Although no evidence of intentional malice or data exfiltration was found, the combination of identity hijacking and shell execution on remote data from sources like chub.ai and charavault.net presents significant architectural risks.
Capability Assessment
Purpose & Capability
Name/description, required binary (node), included extractor script, and instructions all align: a Node-based PNG/JSON extractor plus file operations to import character cards is expected for this functionality.
Instruction Scope
The runtime instructions tell the agent to download cards from arbitrary URLs (curl), parse them, and write their contents into persistent OpenClaw files (~/.openclaw/characters, SOUL.md, MEMORY.md). That is functionally necessary for the skill, but it means untrusted community card JSON (including system_prompt and post_history_instructions) will become agent system prompts and persistent memory — a prompt-injection risk. Also, SKILL.md/README claim WEBP support, but the extractor only verifies PNG signatures and will fail for many WEBP files (incoherent support claim).
Install Mechanism
No install spec; instruction-only with local Node script. Nothing is downloaded as part of an install step by the skill itself, so install risks are low. The SKILL.md does instruct using curl to fetch cards at runtime (user-driven), which is expected but means network fetches occur.
Credentials
No environment variables or external credentials are requested — appropriate. However, the skill relies on downloading community content (Chub.ai, CharaVault or arbitrary URLs) and then writing that content into the agent's identity and memory. That external-network + persistent-write combination is proportional to the feature but increases attack surface (malicious cards could alter agent behavior).
Persistence & Privilege
The skill overwrites/backs up ~/.openclaw/SOUL.md and appends to ~/.openclaw/MEMORY.md to implement persona and persistent memories. This is expected for a persona-management skill, but these are high-impact files: writing untrusted system-level prompts into SOUL.md grants imported cards lasting control over agent behavior across sessions. The skill does not request always:true and is user-invocable, which is appropriate.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install sillytavern-cards-skill - After installation, invoke the skill by name or use
/sillytavern-cards-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
sillytavern-cards-skill 0.1.0
- Initial release for importing and roleplaying with SillyTavern-compatible character cards (TavernAI V2/V3 PNG format).
- Supports importing character cards from local files, URLs, and direct search/browse from Chub.ai and CharaVault.
- Provides three modes of character interaction: “Play” (full immersion), “Soul” (hybrid), and “Chat” (casual).
- Handles extracting embedded JSON from PNG/WEBP, and supports raw JSON cards.
- Users can list, edit, or delete imported characters, and use them in any messaging channel.
Metadata
Frequently Asked Questions
What is sillytavern-cards?
Import and roleplay with SillyTavern-compatible character cards (TavernAI V2/V3 PNG format). It is an AI Agent Skill for Claude Code / OpenClaw, with 266 downloads so far.
How do I install sillytavern-cards?
Run "/install sillytavern-cards-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is sillytavern-cards free?
Yes, sillytavern-cards is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does sillytavern-cards support?
sillytavern-cards is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created sillytavern-cards?
It is built and maintained by pearyj (@pearyj); the current version is v0.1.0.
More Skills