Pop-cam NanoBanana

• Verdict: Advisory
• Analyzed: Apr 13, 2026, 5:21 PM
• Findings: 0
• Version: 1.3.0
• Hash: 3cc97bd64d796406ac8e9d9c9d2fbe494beec20b52608f167c887b8720e5f9ec
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: pop-cam Version: 1.3.0 The pop-cam skill is a standard API integration for image generation services. It uses the POPCAM_API_TOKEN environment variable to interact with the pop-cam.com domain via curl, supporting both text-to-image and image-to-image transformations. No evidence of data exfiltration, malicious execution, or prompt injection was found in SKILL.md or _meta.json.