Source Library

• Analyzed: May 12, 2026, 4:31 AM
• Findings: 1
• Version: 2.1.1
• Hash: 96da62d836cd7783f14384b25b5ca1f0613928ed9f81656f5793c46fc0c0c05f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is vulnerable to shell injection due to the `SKILL.md`'s auto-trigger behavior combined with `allowed-tools: "Bash(node:*)"`. The agent is instructed to execute `node scripts/source-library.js save` with arguments derived from user-shared URLs (e.g., `--name`, `--url`, `--claims`). If these user-controlled values are not properly sanitized by the agent before constructing the Bash command, a malicious user could inject arbitrary shell commands. Additionally, the agent is instructed to 'Analyze with context' using content from user-populated markdown files, creating a potential prompt injection vector against the agent itself.