Multi-Brain Protocol

• Analyzed: May 12, 2026, 3:29 AM
• Findings: 1
• Version: 1.0.0
• Hash: e51fe53ee9a1a6792e27714d472a34a3d9910fe49accba30d0f2818d2544dbdb
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to the implementation of persistent background execution via `launchd` (macOS) or `systemd` (Linux) services, as seen in `daemon/install.sh` and `src/cli.js`. Additionally, API keys are stored in plaintext in `~/.dual-brain/config.json`, which is a significant security vulnerability explicitly acknowledged in `BUILD-SUMMARY.md` and `CHANGELOG.md`. While the persistence is for the stated purpose of running a daemon, and the plaintext key is a vulnerability rather than an active attack, these are high-risk behaviors that warrant a 'suspicious' classification rather than 'benign'.