Mycobot

• Analyzed: May 12, 2026, 4:29 AM
• Findings: 1
• Version: 1.0.0
• Hash: f84cd8027bbb6638cfce61e91e8d97f286eb617c8985f7abfbfa15cbfdc0b38b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides integration with the WhatsApp Business API via Maton.ai, requiring a `MATON_API_KEY` for authentication. All network requests in the provided code examples are directed to legitimate `maton.ai` domains, which is consistent with the skill's stated purpose. There is no evidence of data exfiltration to unauthorized endpoints, malicious code execution (e.g., `curl|bash`, `eval` on untrusted input), persistence mechanisms, obfuscation, or prompt injection attempts against the AI agent in the `SKILL.md` file. The instructions and code are clear and aligned with standard API interaction practices.