Back to plugin

Security audit

Openclaw Media Gen

Security checks across malware telemetry and agentic risk

Overview

The package is internally consistent: it implements an AIsa-backed image/video generator that only requires AISA_API_KEY and python3 and contains a CLI client that calls api.aisa.one and saves generated media locally.

This skill is coherent with its stated purpose: it runs a bundled Python CLI that sends prompts to api.aisa.one using AISA_API_KEY and saves returned media to disk. Before installing: 1) Ensure you trust the AIsa service (api.aisa.one) because prompts and any media will be transmitted to that endpoint. 2) Provide only a dedicated API key (don't reuse high-privilege or unrelated credentials). 3) Be aware the client will download returned media (files written to your working directory). 4) Note minor metadata inconsistencies (repository/homepage entries) — if provenance matters, verify the publisher and upstream repository before use.

VirusTotal

No VirusTotal findings

View on VirusTotal

Static analysis

No suspicious patterns detected.