Alibabacloud Bailian Video Creator

• Analyzed: May 14, 2026, 8:41 AM
• Findings: 1
• Version: 0.0.1
• Hash: 439e7e29986cebc6d8d6cc91a4660ab448e96e903de777f2b2104743fae9078b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides video generation and analysis via Alibaba Cloud's DashScope API but includes high-privilege operations for credential management. The script `scripts/api_key.py` uses `subprocess` to execute `aliyun` CLI commands, modifies the local configuration file `~/.aliyun/config.json`, and can auto-install CLI plugins. While these behaviors are documented in `SKILL.md` and aligned with the stated purpose of automating cloud-based video creation, the direct management of cloud API keys and shell-based plugin installation are high-risk capabilities that warrant a suspicious classification.