Back to skill
Skillv1.0.0
VirusTotal security
AI Short Film Studio · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMay 1, 2026, 4:11 AM
- Hash
- 492c0dd012508a7494c49a1b8375dba0a4d3549c5f411bdc719461a36d7abefd
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: ai-short-film-studio Version: 1.0.0 The skill bundle contains hardcoded Tencent Cloud credentials (SecretId: AKIDd9FF2hAh9QVegYIrbBZlz42zsgMyXyJU) in `references/sucuang_api.md`, which is a significant security vulnerability. It also heavily promotes a specific third-party service (api.wuyinkeji.com) using referral links throughout the documentation. While the Python scripts for media processing and API orchestration appear functional for the stated purpose of AI film production, the inclusion of static credentials and the reliance on local command execution via subprocess (FFmpeg) pose a high risk to the user's environment.
- External report
- View on VirusTotal