moltlang

• Analyzed: May 12, 2026, 3:11 AM
• Findings: 1
• Version: 1.0.0
• Hash: 6ad8a6891eba4385b71bf7e7f18562d9cdbfc3651c4346335098d2e49da34892
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to its reliance on remote fetches for installation, which introduces a supply chain risk. Both SKILL.md and README.md contain instructions for the AI agent to execute `git clone` and `curl` commands to download files from `https://github.com/eduarddriessen1/moltlang`. While these commands are intended for legitimate installation of the skill's own components, they represent a risky capability as they fetch content from an external, mutable source, making the skill vulnerable to supply chain attacks if the remote repository were compromised.