Video Call AI Character

• Analyzed: May 11, 2026, 6:26 AM
• Findings: 1
• Version: 1.0.8
• Hash: 51ed180ec63b2bb9c1d7ca3ee6c3b9f2575aa2b167df7c4f2420bcf73a47f868
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill facilitates AI-powered video calls by running a local Node.js server and optionally using `cloudflared` to create a network tunnel, which are high-risk behaviors even if plausibly required for the stated purpose. It instructs the agent to execute code via `npx openclaw-video-call` and manage media files in `/tmp`, while sending user and agent context to Runway ML (`dev.runwayml.com`) to generate avatars. No clear evidence of intentional malice was found, but the combination of remote code execution and network tunneling warrants a suspicious classification.