Nori Health

• Analyzed: May 12, 2026, 4:27 AM
• Findings: 1
• Version: 1.0.6
• Hash: 95810f8e0689887a83a53e0f2a208615aee46d332bb00d80b2156e2c9ecf65ed
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It securely handles user input by using `jq -n --arg msg` to prevent shell injection when constructing the JSON payload for the `curl` request. The `curl` command targets a specific, hardcoded domain (`api.nori.health`), and the `NORI_API_KEY` is used as expected for authentication. There are no signs of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the AI agent; instructions in SKILL.md explicitly reinforce safe behavior like forwarding messages verbatim.