FastMode CMS - Host, Deploy, Manage Websites for Free

• Analyzed: May 12, 2026, 4:21 AM
• Findings: 1
• Version: 1.5.3
• Hash: 97f4fb72c4f43f82c5ffaf47ec0fe83489c18d89f2634fc8175c9a7f91196a7f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to install and use the `fastmode-cli` tool for website creation and deployment. It is classified as suspicious due to several high-risk capabilities, even though no explicit malicious intent is evident. These include the installation of an external npm package (`fastmode-cli`) which introduces a supply chain risk, the management of sensitive credentials (`~/.fastmode/credentials.json`), and explicit instructions in `SKILL.md` for the AI agent to significantly modify user-provided HTML (e.g., removing SEO tags, adding `data-edit-key` attributes) and JavaScript (e.g., removing or replacing form handlers). While these actions are explained as necessary for platform compatibility, they represent powerful capabilities that could lead to unintended data loss or functional changes if misinterpreted or misused.