BlackPix

• Analyzed: May 12, 2026, 4:22 AM
• Findings: 1
• Version: 1.0.0
• Hash: 0f021cca843ade4994016335737451800dd884ac794eba24be1268ce267bbbcb
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to potential prompt injection vulnerabilities in SKILL.md. Instructions like "Save your API key!" and "Send claimUrl to your human..." could be interpreted by a vulnerable AI agent to store sensitive information insecurely or exfiltrate data (the claimUrl) through unintended channels. While the explicit intent of these instructions appears functional for the skill's operation, they represent risky capabilities that could be exploited by a poorly secured agent, leading to information disclosure.