Back to skill
Skillv1.0.3

VirusTotal security

Chatgpt Image Generation · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 29, 2026, 5:03 AM
Hash
2acd87231af33b1efc1d116a5ea2d7315ebc9e125a8dd870f7c60b92174bf7a4
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: chatgpt-image-generation Version: 1.0.3 The skill utilizes Playwright (`scripts/generate.js`) to automate the ChatGPT web interface, which involves high-risk capabilities such as browser manipulation, network requests, and local file system writes. While the script's logic is consistent with its stated goal of image generation and lacks evidence of intentional malice, the use of automated browser sessions for handling authenticated pages and the lack of path sanitization for output files represent significant security surfaces. Additionally, the installation instructions in SKILL.md involve downloading external browser binaries via npx, which is a common but high-privilege operation.
External report
View on VirusTotal