Back to skill
Skillv1.0.0
VirusTotal security
Industrial Mecha Style Transform (Seedance 2.0) · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousMar 22, 2026, 8:51 AM
- Hash
- 1c5968d3b2db83232e81c6766bb3537b8a201ca6258135263c1facd5f5731351
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: industrial-mecha-transform-video-gen-seedance2-0 Version: 1.0.0 The skill bundle contains a Node.js script (scripts/video_gen.js) that facilitates video generation via the WeryAI API. The script includes functionality to read local files and upload them to a remote endpoint (api-growth-agent.weryai.com), which is a high-risk capability as it allows for potential data exfiltration of sensitive local files if the agent is misdirected. While this behavior is documented as a requirement for image-to-video tasks and the SKILL.md instructs the agent to obtain user consent, the presence of broad file-read and network-upload logic without strict path sandboxing qualifies as a risky capability. No evidence of intentional malice, obfuscation, or credential theft was detected.
- External report
- View on VirusTotal