Back to skill
Skillv3.0.0

VirusTotal security

Image Generator · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 30, 2026, 5:39 AM
Hash
73c63ef828d57f222162c97071282ac4e46c07b48accae1acb4f34931faa64e6
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: anygen-image-generator Version: 3.0.0 The SKILL.md file contains instructions that direct the AI agent to automatically install additional software components using the command `anygen skill install -y` if a specific dependency is missing. This is a form of prompt injection that encourages the agent to bypass standard security boundaries by fetching and executing unverified third-party code from the `anygen.io` ecosystem. While the tool's stated purpose is image generation, the automated installation of further 'skills' via a CLI tool is a high-risk behavior typical of supply chain or persistence attacks.
External report
View on VirusTotal