Back to skill
Skillv1.0.0
VirusTotal security
Ad-Ready Pro · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 29, 2026, 3:23 AM
- Hash
- ce7b1628a9383e3ab32abc1a80b72f03d6fec6c0a361b3c6d3e69613a0584396
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: ad-ready-pro Version: 1.0.0 The skill is classified as suspicious due to its broad use of high-risk capabilities, even though they appear aligned with the stated purpose. The `SKILL.md` explicitly instructs the AI agent to execute shell commands (`ls | grep`) and download files from arbitrary URLs to `/tmp`. The `scripts/generate.py` then performs extensive network requests, including fetching brand logos from external services (`logo.clearbit.com`, `img.logo.dev`), scraping product pages, and uploading user-provided or auto-fetched images to `api.comfydeploy.com`. While these actions are necessary for the skill's functionality, the ability to download and write arbitrary content to the filesystem, combined with reliance on external third-party content sources and the agent's shell execution capabilities, presents a significant attack surface for potential supply chain attacks or prompt injection leading to unintended file writes or data exposure, even if no explicit malicious intent is observed.
- External report
- View on VirusTotal