Paycheck

• Analyzed: May 11, 2026, 6:52 AM
• Findings: 1
• Version: 2.0.2
• Hash: e5a0b437bd82a54dda4c35d538f62b369cffcda922c7e26771ed2cd7a63e02dd
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'paycheck' skill is a local logging utility designed to record and track salary-related data in ~/.local/share/paycheck/. The script (scripts/script.sh) performs basic file append operations and local searches without any network access, data exfiltration, or suspicious execution patterns. While there are functional bugs in the script's logic (duplicate case labels for 'export' and 'status' prevent the actual export functions from being reached), these are unintentional flaws rather than malicious intent.