Back to skill
Skillv1.0.0

VirusTotal security

🎬 观影小管家 · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewMay 1, 2026, 5:12 AM
Hash
a0e690def94b3c3b519f525da2cebb14cba213f6d20de3228a4df2d5f0e04e83
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: movie-butler Version: 1.0.0 The skill is classified as suspicious primarily due to the presence of hardcoded default API keys for TMDB and OMDb, and a default Emby User ID within `index.js`. While these are likely intended for fallback or demonstration purposes, hardcoding any API keys or user IDs is a security vulnerability, as it could lead to exposure if these default credentials are compromised or misused. All network calls are directed to legitimate services (TMDB, OMDb) or a user-configured local Emby server, and file system operations are confined to the skill's `movie-memory.md` file, showing no signs of data exfiltration or unauthorized access.
External report
View on VirusTotal