Back to skill
Skillv1.0.3
VirusTotal security
Chatgpt Image Generation · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 29, 2026, 5:03 AM
- Hash
- 2acd87231af33b1efc1d116a5ea2d7315ebc9e125a8dd870f7c60b92174bf7a4
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: chatgpt-image-generation Version: 1.0.3 The skill utilizes Playwright (`scripts/generate.js`) to automate the ChatGPT web interface, which involves high-risk capabilities such as browser manipulation, network requests, and local file system writes. While the script's logic is consistent with its stated goal of image generation and lacks evidence of intentional malice, the use of automated browser sessions for handling authenticated pages and the lack of path sanitization for output files represent significant security surfaces. Additionally, the installation instructions in SKILL.md involve downloading external browser binaries via npx, which is a common but high-privilege operation.
- External report
- View on VirusTotal
