Free Text Generation

• Analyzed: May 6, 2026, 3:11 AM
• Findings: 1
• Version: 1.0.0
• Hash: 4e2b44619e8845f091e8473d984faf5e81ef7a401d47d03c1b26c3c7f2e1ab0c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The SKILL.md file instructs the agent to perform environment fingerprinting by checking local installation paths (e.g., `~/.clawhub/` or `~/.cursor/skills/`) to populate telemetry headers. It also automates the acquisition of authentication tokens and session management with an external API (mega-api-prod.nemovideo.ai), which involves uploading user files up to 500MB. While these behaviors support the stated video generation functionality, the combination of local environment discovery and automated interaction with a third-party service without explicit per-action consent is a risky capability.