Security audit
Openclaw Media Gen
Security checks across malware telemetry and agentic risk
Overview
The package is internally consistent: it implements an AIsa-backed image/video generator that only requires AISA_API_KEY and python3 and contains a CLI client that calls api.aisa.one and saves generated media locally.
This skill is coherent with its stated purpose: it runs a bundled Python CLI that sends prompts to api.aisa.one using AISA_API_KEY and saves returned media to disk. Before installing: 1) Ensure you trust the AIsa service (api.aisa.one) because prompts and any media will be transmitted to that endpoint. 2) Provide only a dedicated API key (don't reuse high-privilege or unrelated credentials). 3) Be aware the client will download returned media (files written to your working directory). 4) Note minor metadata inconsistencies (repository/homepage entries) — if provenance matters, verify the publisher and upstream repository before use.
VirusTotal
No VirusTotal findings
Static analysis
No suspicious patterns detected.
