Credential Manager

• Analyzed: May 12, 2026, 3:28 AM
• Findings: 1
• Version: 1.3.0
• Hash: 935325ba7c37433bfc3783d39adf74ca489f26ee040c0285251770b18ba4dc9d
• Source: palm
• External report: View on VirusTotal

Findings (1)

This skill is classified as suspicious due to its extensive use of high-risk capabilities, including scanning the entire filesystem for credential files, reading their contents, modifying sensitive files like `.env` and `.gitignore`, changing file permissions (`chmod 600`), and deleting original credential files. While these actions are explicitly stated as necessary for its security-enhancing purpose (centralizing and securing credentials), they represent significant control over the user's sensitive data and system configuration. The `SKILL.md` and other documentation files use strong, imperative language to instruct the agent to perform these actions, which, while aimed at enforcing security, constitutes a form of prompt injection directing the agent to execute sensitive operations.