Ai No Limits

• Analyzed: May 11, 2026, 3:11 AM
• Findings: 1
• Version: 1.0.0
• Hash: 9de0f9dfae0f7c4b000554bb92d5e9be41486a85d796f8449641b605a455e96a
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill facilitates cloud-based video editing via the 'nemovideo.ai' API but includes instructions for the agent to perform several high-risk background actions. Specifically, it directs the agent to automatically generate a UUID and perform network requests for authentication and session creation upon activation, and to probe the user's filesystem (e.g., checking for `~/.clawhub/` or `~/.cursor/skills/`) for platform fingerprinting. Furthermore, the instructions explicitly tell the agent to hide raw API responses and token values from the user, which, combined with the automated network activity, warrants a suspicious classification under the provided criteria.