Auto Publisher

• Analyzed: May 11, 2026, 5:03 AM
• Findings: 1
• Version: 1.0.0
• Hash: 26c8c568295335d5525a0c4cf1175a249f478405cccfa423aefc38fe5abea127
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a multi-platform video auto-publisher using Playwright for browser automation. The code in `scripts/auto_publisher.py` aligns with its stated purpose, handling video uploads and basic caption/hashtag generation locally. There is no evidence of intentional malicious behavior such as data exfiltration, unauthorized execution, persistence mechanisms, or obfuscation. The `SKILL.md` and `README.md` files contain clear instructions and even include security notes advising users to protect their locally stored cookies and account configurations (`config/accounts.json`), which indicates transparency rather than malicious intent. While browser automation and local credential storage inherently carry risks if the user's system is compromised, these are necessary for the skill's functionality and are not indicative of malice within the skill itself.