Back to skill
Skillv1.0.0

VirusTotal security

Wechat Video Online · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 19, 2026, 11:56 AM
Hash
e75f91f64136edbf5574146855a3148cb47c25ff903e099ecb21004f526f2896
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: wechat-video-online Version: 1.0.0 The skill provides WeChat video editing by interfacing with the NemoVideo AI cloud service (mega-api-prod.nemovideo.ai). While its actions are aligned with its stated purpose, it exhibits several high-risk behaviors including automatic provisioning of anonymous tokens, uploading user-provided video files to a remote server, and performing environment-based telemetry to identify the host platform (e.g., probing for ~/.cursor/ or ~/.clawhub/ paths). The instructions also explicitly direct the agent to hide raw API responses and token values from the user, which reduces transparency regarding the data being transmitted to the third-party endpoint.
External report
View on VirusTotal