AceToolz Password Generator

• Analyzed: Apr 4, 2026, 4:41 PM
• Findings: 1
• Version: 1.0.2
• Hash: 13730a649e2082817ac645cd6dc0a5a8e28671a46d442d597894658a71b53a83
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill generates passwords by instructing the agent to execute shell commands (curl or Invoke-RestMethod) against a third-party API (acetoolz.com). This is classified as suspicious because it relies on the agent to safely construct shell commands using user-provided parameters, which presents a risk of shell injection. Additionally, generating sensitive credentials via an external web service instead of locally is a significant privacy and security risk, as the service provider could potentially log the generated passwords.