HN Digest

• Analyzed: May 11, 2026, 3:01 AM
• Findings: 1
• Version: 1.0.1
• Hash: 22e69eec73ed0e3c9106140c2d8925205035408e0cb147cee900c1b0c9e5231b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to the `nano_banana_mood.py` script attempting to load an API key from `~/.openclaw/openclaw.json`. While this is plausibly for its own legitimate use (loading the 'nano-banana-pro' API key), it demonstrates the capability to access sensitive configuration files from the user's home directory, which is a high-risk permission. Other potential prompt injection vectors identified in `SKILL.md` are mitigated by robust argument validation in `hn.mjs` and careful prompt construction in `mood_prompt.mjs`.