aida

• Analyzed: May 12, 2026, 3:16 AM
• Findings: 1
• Version: 1.0.0
• Hash: c9c032d04c9e66a8b9eb16d1ac0801c0aef012154c6d5e1a6a7504408429fe49
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It provides a conversational interface to an AIDA smart building platform, making authenticated API calls to a configurable endpoint (`AIDA_API_URL`) using an environment variable for the API key (`AIDA_API_KEY`) as seen in `skills/aida/index.js`. This network access is essential for its stated purpose. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts in `SKILL.md`, or obfuscation. Dependencies are standard and legitimate (`node-fetch` in `package.json`).