Api Endpoint Discovery

• Analyzed: Apr 25, 2026, 5:16 PM
• Findings: 1
• Version: 1.4.0
• Hash: ba3a70a5592de6c732598fd63cf20eb12d9d557bbc4150a1728a12206796f6aa
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle implements a functional API security scanner that performs passive OSINT and active path brute-forcing as described in its documentation. The code (endpoint_discovery.py) uses standard Python libraries to discover Swagger specs, parse robots.txt, and probe common API endpoints. While it includes a commercial licensing model with Stripe payment links and a basic 'Pro' tier check, there is no evidence of data exfiltration, malicious execution, or unauthorized access to the host system.