File Launcher

• Analyzed: Apr 21, 2026, 2:06 PM
• Findings: 1
• Version: 1.0.0
• Hash: 44a10409bd7ed56532afd714b994bb557e0591920f7c28c711481035684b93b6
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'file-launcher' skill grants the agent the ability to execute arbitrary files and programs using the PowerShell 'Invoke-Item' command, as documented in SKILL.md. While this behavior is consistent with the stated purpose of opening media or documents, it provides a high-risk primitive for Remote Code Execution (RCE) if the agent is manipulated into launching malicious scripts or system binaries. No explicit evidence of malicious intent or data exfiltration was found, but the lack of path restrictions makes it a significant security risk.