Trust Assessment
openclaw-media-gen received a trust score of 64/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 3 findings: 0 critical, 2 high, 1 medium, and 0 low severity. Key findings include Suspicious import: urllib.request, Potential data exfiltration: file read + network send, Arbitrary file write via unvalidated output path.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 12, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings3
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Potential data exfiltration: file read + network send Function '_download_to_file' reads files and sends data over the network. This may indicate data exfiltration. Review this function to ensure file contents are not being sent to external servers. | Static | skills/bowen-dotcom/aisa-media-gen-en-skill/scripts/media_gen_client.py:93 | |
| HIGH | Arbitrary file write via unvalidated output path The `scripts/media_gen_client.py` script allows users to specify an arbitrary output file path via the `--out` argument for image and video downloads. The `_download_to_file` function directly uses this path in `os.makedirs` and `open()`, making it vulnerable to path traversal and arbitrary file write. An attacker could specify paths like `../../../../tmp/evil.sh` to write files outside the intended directory, potentially overwriting system files or injecting malicious scripts if the skill runs with elevated privileges. Validate the `out_path` argument to ensure it stays within an allowed directory (e.g., by resolving to an absolute path and checking if it's a subdirectory of a safe base path) or sanitize it to prevent path traversal characters (e.g., `..`, `/`). A common approach is to use `os.path.abspath` and `os.path.commonprefix` or `pathlib.Path.resolve()` and check if the resolved path is within a designated output directory. | LLM | scripts/media_gen_client.py:108 | |
| MEDIUM | Suspicious import: urllib.request Import of 'urllib.request' detected. This module provides network or low-level system access. Verify this import is necessary. Network and system modules in skill code may indicate data exfiltration. | Static | skills/bowen-dotcom/aisa-media-gen-en-skill/scripts/media_gen_client.py:24 |
Scan History
Embed Code
[](https://skillshield.io/report/0d480d5c218cd8e5)
Powered by SkillShield