Writing Tone Clone

• Analyzed: May 15, 2026, 7:30 AM
• Findings: 1
• Version: 1.0.1
• Hash: fdeda7c5c7bae37db92a49d64a23cbc23065c2f940ea13eaf6bed83fcf20cf2b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill requests highly sensitive personal information, such as diaries and private emails, for linguistic analysis. It also instructs the agent to perform file system operations by writing new files to the 'skills/' directory (SKILL.md). While these actions are necessary for the stated purpose of cloning a writing style, the use of a user-provided variable in the file path ('[name]') without explicit sanitization instructions presents a potential path traversal vulnerability. Per the analysis criteria, risky capabilities like file access that are plausibly needed for the stated purpose are classified as suspicious.