Gemini TG Image Gen

• Analyzed: May 12, 2026, 3:39 AM
• Findings: 1
• Version: 1.0.0
• Hash: 5e763e5c106d2473c520f28312f83e542024e25c558bdb71e85fbd1138aaa7f7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It generates images using the OpenRouter API and sends them to Telegram, as described. The `SKILL.md` instructions are clear and do not contain any prompt injection attempts or instructions to deviate from the stated purpose. The `scripts/generate_image.py` script correctly interacts with `openrouter.ai`, reads the `OPENROUTER_API_KEY` environment variable, and saves generated images to a temporary workspace directory (`/root/.openclaw/workspace/tmp`). There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation. All actions are aligned with the stated purpose.