Cheapest Image Generation

• Analyzed: May 15, 2026, 4:32 AM
• Findings: 1
• Version: 1.0.2
• Hash: ffc55520a98bf90a7ef4c3b650a1d087ceae30f8d8fe2b27a7c543dff1f081cd
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills bundle for 'cheapest-image-generation' is classified as benign. The `SKILL.md` explicitly highlights 'CRITICAL SECURITY' for output filename sanitization, which is robustly implemented across all reference scripts (`curl_heredoc.md`, `powershell.md`, `python.md`). Filenames are sanitized using `tr -cd 'A-Za-z0-9._-'` (bash) or handled safely via `[System.IO.Path]::GetFullPath` (PowerShell) and `os.path.abspath` (Python). User prompts are safely embedded in JSON payloads using `json_escape` (bash), `ConvertTo-Json` (PowerShell), or `json.dumps` (Python), preventing injection. All network activity is directed to the stated `https://api.evolink.ai` endpoint, and there is no evidence of data exfiltration, backdoor installation, or other malicious intent.