vispatrol-alram-query

• Analyzed: May 6, 2026, 5:57 AM
• Findings: 1
• Version: 1.0.1
• Hash: 68ffaabbf9fab271251048a682d63f9cff856999c315234563a78b1e81d78bee
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed to query a local VisPatrol security system on Windows. It retrieves a session token from a local configuration file (%TEMP%/vpup.json) and uses the host's MAC address as a decryption key to access the token, which is a standard node-locking practice for local service integrations. The Python script (scripts/alarm_query.py) performs authorized network requests to a locally defined IP and saves snapshot images to a designated temporary workspace. The instructions in SKILL.md explicitly mandate user consent before accessing local files, and the overall logic is consistent with the stated purpose without evidence of malicious exfiltration or unauthorized execution.