Calctool

• Analyzed: May 14, 2026, 6:44 AM
• Findings: 1
• Version: 2.0.1
• Hash: 22a15382110551e38963f5de2148309ab68e26b39dae4fe88336a629baae14ba
• Source: palm
• External report: View on VirusTotal

Findings (1)

The CalcTool skill is a local logging utility that records user-provided strings (intended to be calculation results) into categorized log files within ~/.local/share/calctool/. While the documentation's claim of 'performing' calculations is slightly misleading—as the tool merely logs inputs provided by the user or AI rather than executing mathematical logic—the implementation is functionally safe. The script (scripts/script.sh) contains no network activity, no data exfiltration, and no high-risk execution patterns. There are minor logical flaws, such as unreachable code blocks for the export and status functions due to shadowed case statements, but no evidence of malicious intent or exploitable vulnerabilities was found.