Wan Image and Video Generation and Editting

• Analyzed: May 11, 2026, 5:02 AM
• Findings: 1
• Version: 1.0.2
• Hash: 21d0d52aaf5ff02aeda1f9346f3cfb5435935497cb0821da368b970ebc5315b4
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate integration for Alibaba's Wan image and video generation models via the DashScope API. The primary script, `scripts/wan-magic.py`, implements standard wrappers for text-to-image, image editing, and video generation tasks, communicating exclusively with the official `dashscope.aliyuncs.com` endpoint. While the script includes functionality to read and base64-encode local files, this behavior is explicitly documented and required for the stated purpose of processing local images; no evidence of intentional data exfiltration, malicious execution, or harmful prompt injection was found.