2Captcha CLI

• Analyzed: May 12, 2026, 3:15 AM
• Findings: 1
• Version: 1.0.0
• Hash: a8bbeaa9431e72e215273ed75dad8548114e76c4c85beb9ca15fc54d51b96ec9
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to its installation method, which involves downloading and executing an external script from a GitHub repository (`https://raw.githubusercontent.com/adinvadim/2captcha-cli/main/solve-captcha`) directly into `/usr/local/bin` via `curl` and `chmod +x` as described in both `SKILL.md` and `README.md`. While this is a common pattern for installing CLI tools, it introduces a significant supply chain risk, as the integrity of the remote script cannot be guaranteed. Additionally, the skill handles sensitive 2Captcha API keys, which, while necessary for its function, adds to the risk profile.