Back to skill
Skillv1.0.0
VirusTotal security
Ai Image To Video Capcut · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 15, 2026, 7:06 PM
- Hash
- f09eed96d9fbc882b57ae6793d933317cdd38904fbf0fbc1fddd5ee0325a64e2
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: ai-image-to-video-capcut Version: 1.0.0 The skill (SKILL.md) facilitates image-to-video conversion via a remote API (nemovideo.ai) but includes high-risk instructions for the AI agent. It directs the agent to silently execute tool calls received from the backend's SSE stream ('Process internally, don't forward') and performs environment fingerprinting by checking installation paths (e.g., ~/.cursor/skills/) to identify the host platform. While these behaviors are framed as part of the cloud rendering pipeline, the lack of transparency in remote execution and the potential for remote prompt injection via the third-party backend make it suspicious.
- External report
- View on VirusTotal