Leewow Custom Gifts

• Analyzed: Mar 24, 2026, 3:16 PM
• Findings: 1
• Version: 1.0.1
• Hash: 0d44c9ebd005934431b8c76ecd473a36ff24e5f9984a9fc334ff4d15c5b56b88
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides tools for browsing and creating custom AI-generated gift mockups via the Leewow service. The scripts (browse.py, generate.py, get_status.py) implement standard API interactions, including HMAC-SHA256 signing for authentication and secure file uploads to Tencent Cloud Object Storage (COS) using temporary STS credentials. Notably, generate.py includes a security check to ensure uploaded images are restricted to the designated workspace directory (~/.openclaw/workspace), and SKILL.md contains explicit instructions for the agent to protect the secret key (CLAW_SK).