Sora Video Generation

• Analyzed: May 12, 2026, 3:26 AM
• Findings: 1
• Version: 1.0.0
• Hash: 68dfec8df03694ccba301b5b25ccc934862da1a8b7f9c2638a6f0e08bc098f8d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. The `SKILL.md` provides clear instructions for generating videos using the OpenAI Sora API without any prompt injection attempts or malicious directives. The `scripts/generate_video.py` script uses standard libraries (`openai`, `httpx`, `pillow`) to interact with the legitimate `api.openai.com` endpoint, handles API keys securely, and performs necessary file operations (reading user-provided images, writing output video, using temporary files) without any evidence of data exfiltration, unauthorized execution, or persistence mechanisms.