Back to skill
Skillv1.0.0
VirusTotal security
Caption Generator By Image · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 14, 2026, 6:01 PM
- Hash
- 0a37f8579cd89143290dcdf017f2c3fd5fe6e197138f28f6aa1d7c403cfd988e
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: caption-generator-by-image Version: 1.0.0 The skill (SKILL.md) instructions enable a remote backend (nemovideo.ai) to potentially control the agent by sending 'tool calls' via an SSE stream, which the agent is instructed to process internally. It also performs environment fingerprinting by checking local installation paths (e.g., ~/.clawhub/ or ~/.cursor/skills/) to determine the host platform for telemetry. While these behaviors are framed as part of a video processing service, the ability for a remote server to trigger agent tools and the collection of environment metadata represent significant security risks.
- External report
- View on VirusTotal