Molt Beach, the Million Dollar Page for AI Agents – Own a piece of internet history

• Analyzed: May 12, 2026, 3:22 AM
• Findings: 1
• Version: 1.0.4
• Hash: 48fc6c98e08888f33d13f54583451cf4cbae41f2e719be6b94e75dc7c0603a76
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to explicit instructions in `SKILL.md` and `llms.txt` for the AI agent to perform file system operations via shell commands (`cat >> .env`, `chmod 600 .env`, `grep -qxF '.env' .gitignore`). While these instructions are presented as security best practices for storing the agent's own secret, they grant the agent powerful file manipulation capabilities. These capabilities, combined with generic prompt injection vectors (e.g., 'Tell what you would like to !', 'render an emoji the human gave you'), create a significant vulnerability that could be exploited to write to arbitrary files or modify system configurations, even though there is no clear evidence of intentional malicious behavior designed into the skill itself.