Back to skill
Skillv0.0.7
VirusTotal security
SkillsVideo CLI · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 12, 2026, 2:16 PM
- Hash
- 15be246c2e1e44420f365221a7784ce3f82601c41dd9fd3f7c4f892a60ff9285
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: skillsvideo-cli Version: 0.0.7 The `skillsvideo-cli` skill bundle contains instructions in SKILL.md that direct the AI agent to automatically download and execute a remote shell script using the high-risk `curl | bash` pattern (https://skills.video/cli/install.sh). This facilitates unverified Remote Code Execution (RCE) on the host system. While the tool's stated purpose is AI media generation, the automated execution of remote scripts and the inclusion of an `install-skill` command with broad targets (e.g., 'auto', 'all') pose significant security risks without clear evidence of intentional malice.
- External report
- View on VirusTotal