Back to skill
Skillv1.0.1

VirusTotal security

Generate product photos for ecommerce · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignMay 1, 2026, 4:32 AM
Hash
c780a9f503be25085ff5fc5f5d2dede5f6c5dd67edbfa4a023002390216308bf
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: productai-skill Version: 1.0.1 The OpenClaw skill bundle for ProductAI.photo is benign. It demonstrates strong security practices, including explicit Server-Side Request Forgery (SSRF) prevention by validating image URLs to block non-HTTPS schemes and private/local IP addresses in `scripts/productai_client.py`. It also implements path traversal prevention for output filenames in `scripts/batch_generate.py` and secures the API key configuration file with `0o600` permissions in `scripts/setup.py`. All network requests include timeouts, and batch processing respects API rate limits. There is no evidence of malicious intent, data exfiltration, unauthorized command execution, or harmful prompt injection attempts in any of the code or documentation files.
External report
View on VirusTotal