WorkRally

• Verdict: Advisory
• Analyzed: Apr 24, 2026, 2:06 PM
• Findings: 0
• Version: 2.3.1
• Hash: af053774420efe74d4efaff023ec1581159d53665d095ff5ff3ca63b00074787
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: workrally Version: 2.3.1 The WorkRally skill bundle is a legitimate toolset for interacting with the WorkRally AIGC platform (workrally.qq.com) for video and image creation. The SKILL.md and reference documents provide clear, functional instructions for an AI agent to manage projects, upload assets, and use AI generation models. The instructions include safety-oriented rules, such as mandating the use of an internal URL builder to prevent malformed links and requiring dynamic model discovery. No evidence of data exfiltration, malicious persistence, or deceptive prompt injection was found.