Generator Green

• Analyzed: May 3, 2026, 4:51 PM
• Findings: 1
• Version: 1.0.0
• Hash: eecd59657c10146ebf38c1ade1cdc8c6fd80f1b4595fa7f6d1c5c82a7391657b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'generator-green' skill acts as a wrapper for an external video processing service at 'mega-api-prod.nemovideo.ai'. While its behavior aligns with its stated purpose, it contains high-risk instructions in 'SKILL.md' that direct the AI agent to perform automated anonymous authentication, upload user files to a third-party cloud, and probe the local filesystem (checking for paths like '~/.cursor/skills/' or '~/.clawhub/') to fingerprint the host environment for telemetry. These capabilities, particularly the environment probing and automated network interactions with an external endpoint, represent a significant attack surface and privacy risk.