Skills/ClawHub/openclaw-kaipai-ai

openclaw-kaipai-ai@2.0.0

CAUTION

Publisher claims: "Process image or video watermark removal and quality restoration with Kaipai AI. Always discover the remote catalog before naming or selecting a task: V2 uses the returned server task metadata; legacy aliases are allowed only when the legacy config explicitly returns them. Video tasks use spawn-run-" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher kaipai · joined 3 days agoInstalls 914Last detonated 3d ago
WatchDispute verdict

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-23 and scored it 68/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Python subprocess execution detected; Access to sensitive file paths; Access to sensitive file paths. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.1sprocessexec /usr/bin/dirname
0.1sprocessexited 1: error: required command not found: rsync
0.1sprocessscript backend runs setup only
0.1sprocessscript backend runs setup only

Static findings

HIGH
Python subprocess execution detectedscripts/vmake_ai.py:563 · Python subprocess execution detected
AST05
CRITICAL
Access to sensitive file pathsSKILL.md:243 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsinstall.sh:77 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/vmake_ai.py:1170 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/client.py:21 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/ai/api.py:584 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/vmake_ai.py:81 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/client.py:24 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsREADME.md:21 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsSKILL.md:227 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/vmake_ai.py:548 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsinstall.sh:27 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsREADME.md:181 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsREADME.md:120 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsinstall.sh:54 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/client.py:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsinstall.sh:71 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsREADME.md:154 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/vmake_ai.py:1171 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsinstall.sh:55 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Telegram Bot API URLscripts/vmake_ai.py:1023 · Telegram Bot API URL — data will be sent to Telegram
AST07
MEDIUM
File type combined with upload actiondocs/feishu-send-video.md:38 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionscripts/client.py:678 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionSKILL.md:66 · File type combined with upload action — agent may exfiltrate local data files
AST07