Agresource

• Analyzed: May 12, 2026, 4:21 AM
• Findings: 1
• Version: 1.0.0
• Hash: 5a057a2f6a9028f6fb415757762afd55e5dcf4987047a670a7169497ee0e98d1
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill's stated purpose is to scrape and analyze AgResource newsletters. While the core functionality aligns with this, both `scraper.js` and `historical_scraper.js` contain hardcoded login credentials (`[e-mail]` and `4BrynnElizabeth`) as fallback values if environment variables are not provided. This is a significant security vulnerability, as it could lead to unintentional exposure of these credentials, classifying the skill as suspicious rather than malicious due to the lack of clear intent for self-exploitation or exfiltration.