Back to skill
Skillv1.0.1
VirusTotal security
Generate product photos for ecommerce · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignMay 1, 2026, 4:32 AM
- Hash
- c780a9f503be25085ff5fc5f5d2dede5f6c5dd67edbfa4a023002390216308bf
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: productai-skill Version: 1.0.1 The OpenClaw skill bundle for ProductAI.photo is benign. It demonstrates strong security practices, including explicit Server-Side Request Forgery (SSRF) prevention by validating image URLs to block non-HTTPS schemes and private/local IP addresses in `scripts/productai_client.py`. It also implements path traversal prevention for output filenames in `scripts/batch_generate.py` and secures the API key configuration file with `0o600` permissions in `scripts/setup.py`. All network requests include timeouts, and batch processing respects API rate limits. There is no evidence of malicious intent, data exfiltration, unauthorized command execution, or harmful prompt injection attempts in any of the code or documentation files.
- External report
- View on VirusTotal
