AI Product Comparison Skill

• Analyzed: Apr 1, 2026, 5:31 PM
• Findings: 1
• Version: 1.0.0
• Hash: 884a628a59cb1b57be641fb2a670f36ded1fd04aa1691253c2e08aee5fd7dd8b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle contains a high-risk instruction in SKILL.md and README.md directing the AI agent to overwrite the system's DNS configuration (echo 'nameserver 8.8.8.8' > /etc/resolv.conf). While framed as a troubleshooting step for sandboxed environments, this is a privileged system modification that could be used to intercept or redirect network traffic. The core logic in scripts/fetch_products.py and scripts/parse_product.py appears to be a legitimate implementation for interacting with the Zyte API (api.zyte.com) to extract e-commerce data.