Dazzle Photo Intelligence

• Analyzed: May 14, 2026, 11:26 PM
• Findings: 1
• Version: 0.1.2
• Hash: 55a7ad4d46fa41ac8ecfa6ab5f1d8ba7c9ef35902c62f548b7cefc38c52067a3
• Source: palm
• External report: View on VirusTotal

Findings (1)

The dazzle-photo-intelligence skill is a legitimate MCP proxy that connects OpenClaw to the Dazzle personalization service. It implements a standard OAuth2 device authorization flow (RFC 8628) and securely stores short-lived tokens in the OS keyring or an encrypted local file using the 'keyring' and 'keyrings.alt' libraries. The code in proxy.py and storage.py follows security best practices, such as using HTTPS for all API calls to api.dazzleassist.com and implementing file-based locking for concurrent token access, with no evidence of malicious intent or data exfiltration.