Back to skill
Skillv1.0.0
VirusTotal security
Wechat Video Online · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 19, 2026, 11:56 AM
- Hash
- e75f91f64136edbf5574146855a3148cb47c25ff903e099ecb21004f526f2896
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: wechat-video-online Version: 1.0.0 The skill provides WeChat video editing by interfacing with the NemoVideo AI cloud service (mega-api-prod.nemovideo.ai). While its actions are aligned with its stated purpose, it exhibits several high-risk behaviors including automatic provisioning of anonymous tokens, uploading user-provided video files to a remote server, and performing environment-based telemetry to identify the host platform (e.g., probing for ~/.cursor/ or ~/.clawhub/ paths). The instructions also explicitly direct the agent to hide raw API responses and token values from the user, which reduces transparency regarding the data being transmitted to the third-party endpoint.
- External report
- View on VirusTotal
