DeepWiki

• Analyzed: May 13, 2026, 3:01 AM
• Findings: 1
• Version: 1.0.0
• Hash: 4fde49d474ba0d4b1f5de0cae0c9291cee656c6114d7cd5a2ca10c41d99a7509
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to query the DeepWiki MCP server for GitHub repository documentation. The `SKILL.md` file clearly describes its purpose and commands without any prompt injection attempts. The `scripts/deepwiki.js` script makes HTTPS requests exclusively to `mcp.deepwiki.com`, as stated in the documentation. It does not access local files, environment variables, or execute arbitrary shell commands, and there is no evidence of data exfiltration, persistence, or obfuscation. All network activity is confined to the stated purpose and domain.