DrawThings Image Generation

• Analyzed: May 12, 2026, 3:36 AM
• Findings: 1
• Version: 1.0.0
• Hash: fd441f12e461c202252ae942fd8a9cfed602a7412abc265cf9808223733511c5
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to generate images using a local DrawThings (Stable Diffusion) application via its API. The `scripts/generate.py` script makes HTTP POST requests to `http://127.0.0.1:7860` by default (configurable via `DRAWTHINGS_URL` environment variable) and saves the base64-encoded image results to local PNG files. All observed behaviors, including network communication and local file writing, are directly aligned with the stated purpose and lack any indicators of malicious intent such as data exfiltration, unauthorized remote execution, persistence mechanisms, or prompt injection attempts against the agent.