Drip director

• Analyzed: May 11, 2026, 4:43 AM
• Findings: 1
• Version: 1.0.0
• Hash: 0b139cbbfa934e9596f49fc55e7563c53fefcf5709d9b9aedcae74bd24693c7a
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as benign. While it utilizes powerful capabilities such as shell command execution (`ls`, `find`, `uv run`, `curl`, `rm`), file system access, and external network calls to the Gemini API, these actions are explicitly required for its stated purpose of deterministic image generation and critique. The `SKILL.md` contains extensive and robust instructions designed to prevent prompt injection against the AI agent, explicitly forbidding unauthorized actions, self-critique, and auto-advancement. User input is highly structured, and shell command arguments are either hardcoded, derived from controlled internal state, or from OpenClaw's internal media paths, with no evidence of unsanitized user input flowing into executable commands. There is no indication of data exfiltration, malicious execution, persistence mechanisms, or obfuscation.