glm-grounding

PassAudited by VirusTotal on May 11, 2026.

Findings (1)

The skill bundle provides legitimate functionality for object grounding and image annotation using the GLM-4.7V model. The instructions in SKILL.md guide the agent through calling an internal API (using a private IP 172.20.112.202), parsing coordinates, and visualizing results, all of which are consistent with the stated purpose. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.