Back to skill
Skillv1.0.0
VirusTotal security
抖音民间诡异故事视频生成器 · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 30, 2026, 6:24 AM
- Hash
- e73cd88e96a82c53a68de7cf35c81c1db8b1a7fd7b96f061fd6e89d3b1117171
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: douyin-folklore-video Version: 1.0.0 The skill bundle automates video creation and social media uploading, but exhibits several high-risk patterns. Specifically, 'scripts/generate_videos.py' requires FTP credentials to be stored in environment variables and uses the insecure FTP protocol to host images for an external API. Additionally, 'SKILL.md' contains hardcoded absolute file paths (e.g., 'C:\Users\SS\AppData\Local\Temp\openclaw\uploads\') and instructs the agent to perform automated browser actions on Douyin (TikTok), which is a high-privilege activity. While these actions appear aligned with the stated purpose, the combination of insecure data handling and specific environment assumptions warrants a suspicious classification.
- External report
- View on VirusTotal
