Back to skill
Skillv1.0.0
VirusTotal security
Video Pro by cza999 · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 5:23 AM
- Hash
- 7d4f8caa8f25cb6a9384fbffd5645f8e60b60f7aabde1a9ab9c81ed50a535898
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: video-pro-cza Version: 1.0.0 The skill bundle acts as a wrapper for a commercial video generation tool but introduces several high-risk behaviors. It instructs the agent to clone and execute code from an external GitHub repository (ZhenRobotics/openclaw-video.git), requires the user to provide sensitive API keys (OPENAI_API_KEY), and includes an activation script (activate-premium.sh) that collects system metadata such as the username and hostname for a local licensing file. While these actions are aligned with the stated commercial purpose, the reliance on external unverified code and the collection of system information represent a significant attack surface and potential for supply chain risk.
- External report
- View on VirusTotal