Agent Contact Card

• Analyzed: May 12, 2026, 3:10 AM
• Findings: 1
• Version: 0.1.0
• Hash: 86535d5beccd5332200e96670b9b429800b5389179c97550e072753f5af953ce
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to facilitate agent-to-agent communication, which inherently involves making outbound HTTP requests to external domains. The `SKILL.md` and `references/EXAMPLES.md` files explicitly instruct the agent to perform HTTP POST requests to an external domain (`https://city-services-api.dave-dean.workers.dev`) as part of a 'test' or demonstration. While these network calls are aligned with the skill's stated purpose, the ability to make arbitrary outbound network calls and send user-derived input to external endpoints represents a significant risk, even without clear evidence of intentional malicious data exfiltration or other harmful actions.