CodivUpload Social Manager (via codivupload.com)

• Analyzed: May 7, 2026, 11:26 AM
• Findings: 1
• Version: 1.0.16
• Hash: acf578f0e21b8bdca0c10b294ea6859abf180864707cd57dfbf9302ed869be4c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate social media management tool for the CodivUpload service. It demonstrates strong security awareness by providing explicit instructions to the AI agent to never leak the API key, to require user confirmation for high-impact actions (like immediate publishing or billing changes), and to use exact version pinning with SHA-512 integrity hashes for its optional MCP dependency (codivupload-mcp). Network access is appropriately restricted to the service's own domains (api.codivupload.com, cdn.codivupload.com, r2.codivupload.com).