Pill Counter Skill

• Analyzed: May 7, 2026, 5:26 PM
• Findings: 1
• Version: 4.2.0
• Hash: 18e96cde1945593e172989fabccf667686baf2a1120274b2af1781170b1c2a7f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate pill-counting utility providing both local OpenCV-based detection and an AI-assisted mode. It functions as described, reading an API key from the standard OpenClaw configuration file (~/.openclaw/openclaw.json) and sending image data to a third-party AI service (api.xiaomimimo.com) only when the AI mode is explicitly invoked. The code in scripts/pill_counter.py is well-structured, lacks obfuscation, and does not exhibit any hidden data exfiltration or unauthorized execution patterns.