Back to skill
Skillv1.1.0
VirusTotal security
Mixtiles It · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 4:07 AM
- Hash
- bcf1e52923fe14a3116095b1b1e1fb8c1e4b59e23a7f523501c88937032a335f
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: mixtiles-it Version: 1.1.0 The skill bundle is benign. The `SKILL.md` provides clear instructions for the AI agent without attempting prompt injection for malicious purposes. The `scripts/mixtiles-cart.py` script implements the stated functionality of processing images and generating Mixtiles links. It includes robust SSRF protection via the `_validate_url` function, which checks URL schemes, blocks internal hostnames, and resolves IPs to prevent access to private networks. Shell injection risks are mitigated by using `subprocess.run` with a list of arguments (defaulting to `shell=False`) when invoking `curl`. Environment variables are used for legitimate configuration, and there is no evidence of data exfiltration, persistence, or other malicious intent.
- External report
- View on VirusTotal