Image Gen Compare

• Analyzed: May 11, 2026, 5:04 AM
• Findings: 1
• Version: 1.0.1
• Hash: e5e17434e5565d42aa50304270ebb540165fddbcd577efec30a413a3f9b6462c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill facilitates image generation comparison but includes high-risk behaviors such as executing subprocesses and accessing sensitive files in the user's home directory. Specifically, `scripts/image_gen_compare.py` reads a service token from `~/.config/openclaw/.op-service-token` and uses `subprocess.run` to invoke the 1Password CLI (`op`) for secret retrieval. While these actions are documented in the `SKILL.md` security notes and aligned with the stated purpose of API key management, the use of out-of-band secret retrieval and hardcoded local cloud storage paths (Proton Drive) meets the threshold for a suspicious classification.