Gemini Painter

• Analyzed: May 11, 2026, 4:39 AM
• Findings: 0
• Version: 1.0.0
• Hash: 69ebc856d70e56e8b9aa8160b335bfea7b391e84ef52d7c9e214f9c3c32fe4af
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: gemini-painter Version: 1.0.0 The skill is classified as suspicious due to two main indicators in `scripts/painter.py`: a hardcoded, weak API key ("OpenClaw") used for authentication with a local service, and the direct passing of unsanitized user prompts to this local API. While the skill's stated purpose is benign (image generation), these practices introduce vulnerabilities. The hardcoded key could be exploited if the local service isn't properly secured, and the direct prompt passing creates a potential prompt injection vector against the local API service itself, which could lead to unintended behavior or exploitation if the local API is not robustly designed to handle malicious input.