automation-workflow-builder（自动化工作流构建器，设计并执行跨平台自动化流程，支持定时触发、文件监控、多步骤操作。适用于数据同步、内容发布、报告生成。）

• Analyzed: Mar 29, 2026, 3:11 PM
• Findings: 1
• Version: 1.0.0
• Hash: 87920eb159026fb88fa4f81b7b1a08b3bc41b19e7fd8ea072e215699ab192dbc
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle requests a high-privilege set of capabilities including 'exec' (arbitrary command execution), 'web_fetch' (network access), and file system 'read'/'write' access. While these permissions are consistent with the stated purpose of an automation workflow builder in SKILL.md and config.json, the combination of shell execution and network access represents a high-risk profile for an AI agent. No explicit evidence of malicious intent or data exfiltration was found, but the broad access rights warrant a suspicious classification per the security threshold.