Back to skill
Skillv1.0.0

VirusTotal security

抖音民间诡异故事视频生成器 · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewApr 30, 2026, 6:24 AM
Hash
e73cd88e96a82c53a68de7cf35c81c1db8b1a7fd7b96f061fd6e89d3b1117171
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: douyin-folklore-video Version: 1.0.0 The skill bundle automates video creation and social media uploading, but exhibits several high-risk patterns. Specifically, 'scripts/generate_videos.py' requires FTP credentials to be stored in environment variables and uses the insecure FTP protocol to host images for an external API. Additionally, 'SKILL.md' contains hardcoded absolute file paths (e.g., 'C:\Users\SS\AppData\Local\Temp\openclaw\uploads\') and instructs the agent to perform automated browser actions on Douyin (TikTok), which is a high-privilege activity. While these actions appear aligned with the stated purpose, the combination of insecure data handling and specific environment assumptions warrants a suspicious classification.
External report
View on VirusTotal