Jules CLI

• Analyzed: May 12, 2026, 3:13 AM
• Findings: 1
• Version: 1.0.2
• Hash: fcf782e907401c96ed136faf4411c83901d3ebc7789ef2926522b20f30b8d15a
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides powerful capabilities for remote code execution and modification via the `jules` CLI. However, the `SKILL.md` file includes exceptionally robust security guidelines and mandatory safety controls for the AI agent. These include explicit instructions for input validation, proper quoting, avoiding inline injection (demonstrated by using environment variables for `python3 -c`), and critically, mandatory user approval for all high-impact commands like `jules remote new`, `jules remote pull --apply`, and `jules teleport`. There is no evidence of intentional malicious behavior, data exfiltration, or obfuscation; instead, the documentation actively mitigates common security risks.