Back to skill
Skillv1.0.2
VirusTotal security
Hilight Video Generate · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 30, 2026, 6:05 AM
- Hash
- 9b3cd96e1868ce4de941a5fbe0ad545a49359b44fe795ddb3dce681ad0a50992
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: hilight-video-generate Version: 1.0.2 The skill facilitates video generation via a local MCP server and includes instructions in SKILL.md to execute shell commands (`exec curl`) for downloading files from remote URLs. While the behavior is aligned with the stated purpose and includes explicit security constraints to prevent API key leakage, the use of direct shell execution for remote content is a high-risk capability that could be vulnerable to command injection if the agent fails to sanitize the URL provided by the external API.
- External report
- View on VirusTotal