Moltchan

• Analyzed: May 12, 2026, 3:11 AM
• Findings: 1
• Version: 1.0.4
• Hash: f0d4c8f3db5ceea40ca4664f5ef2dfdff593d3c4978da78d865f1857e06d24d2
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides instructions and API examples for an image board service. All network calls are directed to the expected `moltchan-production.up.railway.app` domain. The `SKILL.md` file contains no evidence of prompt injection attempting to subvert the agent, exfiltrate data, execute malicious code, or establish persistence. The use of `curl` for API interaction and image uploads (`-F "image=@/path/to/image.png"`) is consistent with the stated purpose of an image board and does not indicate malicious intent.