Screenshot Tool

• Analyzed: May 2, 2026, 4:31 PM
• Findings: 1
• Version: 1.0.0
• Hash: ab9617cd4704607d60f985b5844efe00458926d9fa9ece322651399abca1d3f6
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides legitimate screenshot and recording functionality but contains a command injection vulnerability in the Windows-specific logic within `scripts/screenshot.py`. The `--output` parameter is interpolated directly into a PowerShell script string without sanitization, potentially allowing arbitrary code execution via a crafted filename. While the tool's behavior aligns with its stated purpose and shows no evidence of intentional malice or exfiltration, this security flaw warrants a suspicious classification.