Ai Short Video

• Analyzed: May 16, 2026, 12:26 PM
• Findings: 1
• Version: 1.0.0
• Hash: e6bbc6d0492861d4098acdaf7ca212065230abe00cd166d7734fe830e6da2b3f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill 'ai-short-video' is classified as suspicious because it instructs the AI agent to automatically initiate network connections to an external API (mega-api-prod.nemovideo.ai) and perform environment fingerprinting upon activation. Specifically, SKILL.md directs the agent to detect the host platform (e.g., Cursor or OpenClaw) by probing local file system paths (~/.cursor/skills/) and to include this metadata in mandatory 'attribution headers' for all API calls. While these actions support the stated video processing service, the automated 'phone-home' behavior and environment probing are characteristic of telemetry or tracking without explicit user consent.