TCM Video Factory

• Analyzed: May 12, 2026, 3:06 AM
• Findings: 1
• Version: 1.0.0
• Hash: 6f6d853770c543839e6fe8c38a5605b4c6ac0921d2962e960d8486f85b375645
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It automates video production planning by interacting with the Perplexity API using a provided API key (`PERPLEXITY_API_KEY`) and writes the generated plan to a markdown file in the current working directory. All network calls are directed to the legitimate Perplexity API endpoint (`https://api.perplexity.ai`), and file system operations are limited to creating the output plan. There is no evidence of data exfiltration, malicious execution, persistence, or prompt injection attempts against the OpenClaw agent in `SKILL.md` or `index.mjs`.