Fulcra Annotations

• Analyzed: May 16, 2026, 7:41 PM
• Findings: 1
• Version: 1.0.2
• Hash: b0a0c168da74dcb0244fddd7211d76a4329ad3ca5338bc532c89d2b7c9c6f31a
• Source: palm
• External report: View on VirusTotal

Findings (1)

The fulcra-annotations skill bundle is a legitimate tool for interacting with the Fulcra Life API. The core script (scripts/fulcra_annotations.py) implements standard API operations for listing, creating, and recording annotations using Python's urllib and subprocess modules for authentication via the Fulcra CLI. The SKILL.md and README.md files contain strong safety guidelines, explicitly instructing the agent to avoid leaking access tokens or private data in chat. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found.