Security Skill Scanner

• Analyzed: May 12, 2026, 3:11 AM
• Findings: 1
• Version: 0.1.0
• Hash: be161539cfcb1bef61c99ff4c9ac1e1638b15139df6ab90da2896da949ab7a7a
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill, described as a security scanner, proposes a deep integration by overriding the `molthub` command in the user's shell profile (`.bashrc` or `.zshrc`) via `SKILL.md`. This allows the `install-hook.py` script to intercept and potentially block the installation of other skills, granting it significant control over skill management. Additionally, it suggests adding cron jobs for persistence of its scanning and monitoring functions. While the stated intent is security, these broad permissions and high level of system control, particularly the `molthub` override, represent a significant attack surface if the underlying scripts were malicious or vulnerable.