Editor Baby Dance

• Analyzed: May 4, 2026, 4:16 AM
• Findings: 1
• Version: 1.0.0
• Hash: f155167c72fc6bd9e4f05a840e4959750d93397a68b4172ec8a98e1ac0bc0ad5
• Source: palm
• External report: View on VirusTotal

Findings (1)

The editor-baby-dance skill (SKILL.md) facilitates video editing via an external API (mega-api-prod.nemovideo.ai) but exhibits several high-risk behaviors. It automatically initiates network connections to obtain anonymous tokens using generated UUIDs, fingerprints the local environment by probing installation paths (e.g., ~/.clawhub/), and implements a remote-control pattern where the backend directs agent actions through Server-Sent Events (SSE). While these capabilities are plausibly linked to its cloud-rendering purpose, the automated external communication and backend-driven execution flow represent a significant attack surface.