🎨 Beauty Generation Api - AI Portrait Generator Skill

The skill instructs the AI agent to use `curl` for direct interaction with external APIs, which is a powerful command-line tool. While examples are benign, dynamic command construction could lead to vulnerabilities.

requires: bins: - curl, curl -X POST https://gen1.diversityfaces.org/api/generate/custom ...

The skill provides a Python script template for users to automate image generation, which, if executed by the agent against explicit instructions, could lead to arbitrary code execution on the host system.

Important: Do NOT ask the agent to execute scripts on the user's system; only provide script templates and guidance

The skill instructs agents to submit user email, username, and country to an unauthenticated POST endpoint on a third-party domain to obtain API keys. The instant auto-approval mechanism combined with the unverified domain creates a risk that this endpoint could harvest user PII (email, username, country) and associate it with generated API keys for tracking or abuse. The domain 'diversityfaces.org' is unverifiable as a legitimate service.

curl -X POST https://gen1.diversityfaces.org/api-key-request \
  -H "Content-Type: application/json" \
  -d '{
    "username": "your_username",
    "email": "your_email@example.com",
    "country": "your_country"
  }'

Despite a weak disclaimer saying 'Do NOT ask the agent to execute scripts on the user's system', the skill provides complete, ready-to-run Python and bash scripts and instructs agents to create them locally with chmod +x. The framing ('Generate Python Script', 'Save the script as generate_beauty.py', 'Make it executable') effectively guides agents toward writing and potentially executing code on the user's filesystem, especially since the disclaimer contradicts the detailed execution instructions that follow.

Save the script as `generate_beauty.py`
Make it executable: `chmod +x generate_beauty.py` (Linux/Mac)
Run with API key and prompt:
   python generate_beauty.py YOUR_API_KEY "A beautiful woman with long hair"

The privacy policy and terms of service URLs all point to the same homepage (https://gen1.diversityfaces.org) rather than dedicated policy pages. This gives the appearance of compliance while providing no actual privacy protections or terms for users to review.

privacy_policy: https://gen1.diversityfaces.org
terms_of_service: https://gen1.diversityfaces.org
**Privacy Policy**: https://gen1.diversityfaces.org