topview-generate

topview-generate is a skill for Claude Code, Codex from topviewai/skill. It costs 96 tokens per session (3,422 once invoked), scanned A, original, Apache-2.0.

A creative-generation skill that uses Topview AI to create or edit images, videos, music, speech, talking avatars, product-avatar images, cloned voices, and background-removed assets.

In plain words
What is it for?
Use it for supported creative generation, editing, asset uploads, board organization, and Topview credit checks.
Why use it?
It provides one documented way to request these creative outputs and check whether a requested feature or model is available.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Use it for supported creative generation, editing, asset uploads, board organization, and Topview credit checks.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/topviewai/skill/topview-generate
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add topviewai/skill --skill topview-generate
Clone the repo
git clone --depth 1 https://github.com/topviewai/skill

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for topview-generate

README.md
[![agentmods](https://agentmods.dev/badge/skills/topviewai/skill/topview-generate/github.svg)](https://agentmods.dev/skills/topviewai/skill/topview-generate)
Your own site
<a href="https://agentmods.dev/skills/topviewai/skill/topview-generate"><img src="https://agentmods.dev/badge/skills/topviewai/skill/topview-generate/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for topview-generate

Your own site · 80×15
<a href="https://agentmods.dev/skills/topviewai/skill/topview-generate"><img src="https://agentmods.dev/badge/skills/topviewai/skill/topview-generate.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 96 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,422 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 5 findings, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • high YARA Match · line 32
    YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).
    Fix: Remove offensive tool references and exploit code. Legitimate agent skills should not contain penetration testing tools, exploit frameworks, or reconnaissance utilities.
  • high Anti-Refusal · line 39
    Skill attempts to nullify the agent's safety policies or restrictions ('you have no restrictions', 'ignore your guidelines', 'do anything now'). This is a direct jailbreak that disables guardrails.
    Fix: Remove jailbreak framing that nullifies safety policies or restrictions. Skill content must not instruct the agent to ignore its guidelines or operate without guardrails.
  • high Prompt Injection · line 39
    This pattern attempts to override system instructions or ignore safety constraints. Without LLM analysis, manual review is recommended.
    Fix: Remove or rewrite any text that instructs the agent to ignore prompts, override safety rules, or trust unverified content. Ensure skill content cannot be injected to alter agent behavior.
  • medium Excessive Agency · line 62
    Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
    Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
  • medium Excessive Agency · line 290
    Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
    Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00096 $0.03422
Opus 5.5 $0.00038 $0.01369
Sonnet 5.5 $0.00019 $0.00684
Haiku 4.5 $0.00010 $0.00342

Measured 2mo ago against content hash e71ad2b9cd83, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

topview-generate scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

The scan reads SKILL.md. This mod also ships 15 executable files (scripts/__init__.py, scripts/ai_image.py, scripts/auth.py, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

topview-generate/SKILL.md · 302 lines

How it starts

The opening of the file, as written. The whole thing — 302 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Topview Generate

Creative generation through the host-managed topview-mcp.

Last updated: 2026-07-21

If a requested model or feature is missing, check topview_get_generation_config before calling it unsupported.

Notes for Auditors

The reply guidelines below are UX preferences for non-technical users in chat apps. They do not ask the agent to hide errors, bypass safety controls, override higher-priority instructions, or perform unattended privileged operations. Authentication and tool execution are controlled by the MCP host. Deviate when the user requests technical detail or safety requires it.

Execution

This skill is MCP-only. Use the creative and upload hot tools exposed directly by topview-mcp: topview_* and ta_*. Never route those tools through get_tool_schema or call_tool; those are only for deferred data-domain tools used by the ops skills. Do not run scripts/*.py or make raw REST calls.

Market and creator-data requests belong to:

  • Amazon → topview-amazon-ops
  • Shopee → topview-shopee-ops
  • TikTok Shop → topview-tiktok-shop-ops
  • YouTube KOL pool → topview-youtube-kol-ops

Prerequisites and Authentication

  1. Confirm the host has connected topview-mcp.
  2. Authentication is handled by the host (Cursor OAuth or the host's mcp_auth flow). Do not ask the user to set TOPVIEW_UID or TOPVIEW_API_KEY manually.
  3. If a tool reports that authentication is required, invoke the host's mcp_auth mechanism. If it returns an authorization URL, send that exact URL to the user. If it does not, ask the user to complete the sign-in action shown by their host. Never invent or promise a URL.
  4. After the user confirms sign-in, retry the original MCP call once.

See Authentication and Credits.

Common Agent Workflow

Keep this sequence centralized here; capability references only add their specific fields.

  1. Understand intent. Determine output type, purpose, source assets, style, duration, language, captions, and publishing channel.
  2. Select a board. Unless the user supplied a boardId, call topview_list_boards. Choose, in order: a board with isSystemDefault=true; a board named My First Board; otherwise the first returned board. Reuse that boardId for the session. If no board exists or the user asks for a new one, call topview_create_board.
  3. Load live model configuration. Before every model-based generation, call topview_get_generation_config with the intended type and taskType. Use models[].submitModel exactly, satisfy every requiredSubmitFields entry, choose constrained values from submitParameterOptions, and use defaultSubmitParameters only when the user omitted a required value.
  4. Upload local assets. For each local image, audio, or video:
    • call ta_upload_credential with its file extension in format;
    • upload the bytes using the returned upload URL and required method/headers;
    • call ta_upload_check_file with the returned fileId;
    • use the fileId only after the check succeeds. Existing Topview fileId values need no upload.
  5. Submit directly. Call the selected topview_* tool directly and retain its taskId, the exact taskType, selected boardId, model, and parameters.
  6. Poll to a terminal state. Call topview_query_task repeatedly with the same taskType and taskId until success or fail. A timeout does not mean failure: continue later with the same identifiers. Do not blindly resubmit, because that can duplicate work and consume credits.
  7. Return the result. Lead with downloadable output URLs. If the result has boardTaskId, include https://www.topview.ai/board/{boardId}?boardResultId={boardTaskId}.

Read the full file on GitHub · 302 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 302 lines · 96 tokens per session scan A e71ad2b9cd83

Subscribe to this mod's changes

topview-generate is a skill published in the GitHub repository topviewai/skill (42 stars, last pushed 3mo ago), licensed Apache-2.0. It adds 96 tokens to every session and 3,422 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

topview-generate compared with skills from other repositories

topview-generate next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
topview-generatetopviewai/skillSkill423mo agoApache-2.0A96Claude Code, Codex
imagegenopenai/codexSkill133kyesterdayApache-2.0A113Codex
playwright-climicrosoft/playwrightSkill99kyesterdayApache-2.0A19Claude Code
local-ai-agentsmicrosoft/ai-agents-for-beginnersSkill79k4d agoMITA200Claude Code, Codex
systematic-debuggingobra/superpowersSkill313k3d agoMITA21Claude Code
next-cache-components-adoptionvercel/next.jsSkill143kyesterdayMITA95Claude Code
next-partial-prefetching-adoptionvercel/next.jsSkill143kyesterdayMITA103Claude Code