Ri Savings Advisor

• Analyzed: May 11, 2026, 5:02 AM
• Findings: 1
• Version: 1.0.0
• Hash: 854a03377773632855adb39ef18a557f9b1278c1a9b98638f69489aaee230229
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as benign. Despite declaring `bash` as a tool, the `SKILL.md` explicitly instructs the AI agent: "This skill is instruction-only. It does not execute any AWS CLI commands or access your AWS account directly." and "Never ask for credentials, access keys, or secret keys — only exported data or CLI/console output." It also advises the agent to "confirm no credentials are included before processing" user data. These strong, explicit negative instructions mitigate any potential risk from the `bash` tool declaration, ensuring the skill functions as a data analysis tool based on user-provided input, without direct system interaction or credential handling.