Avatar Helper

• Analyzed: May 11, 2026, 6:05 AM
• Findings: 1
• Version: 1.0.1
• Hash: daa2b366928146b3d03a4e8854a8d6a82554909e63aa3bc0b3090451db0e1be0
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to allow the AI agent to proactively browse a specific wallpaper website (https://wallpaper.dfyx.click/avatar) and download an avatar image to a local directory. While the instructions in SKILL.md and README.md encourage the agent to adopt a specific persona and take 'subjective initiative' in choosing images, there is no evidence of malicious intent, data exfiltration, or unauthorized system access. The use of curl is consistent with the stated purpose of downloading image assets.