today-in-history

• Analyzed: May 12, 2026, 4:21 AM
• Findings: 1
• Version: 1.0.0
• Hash: 977872daee4b33a638eabcbf79a9c4ed100780519ac1532aa61b99facf72f7af
• Source: palm
• External report: View on VirusTotal

Findings (1)

The `SKILL.md` file explicitly instructs the AI agent to execute `curl` commands to fetch data from Wikipedia, indicating the agent possesses shell execution capabilities. Additionally, it contains prompt injection instructions (e.g., to modify output formatting and suppress extra text) that demonstrate the agent's susceptibility to being directed by markdown instructions. While the current `curl` targets are legitimate Wikipedia APIs and the prompt injection aims for clean output, the combination of direct shell command execution and prompt injection vulnerability presents a significant risk for potential remote code execution or unauthorized actions if the agent's input processing is compromised or a malicious prompt is introduced.