mycroft

• Analyzed: May 12, 2026, 4:18 AM
• Findings: 1
• Version: 1.0.2
• Hash: c41e23a8b50369df4ad76e44d72d416064f0b5e365e51e8b6b4c605e4f811fc1
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle defines a tool for EPUB ingestion and Q&A using OpenAI. The `SKILL.md` provides clear instructions for installation via npm (`@fs/mycroft`) and usage of the `mycroft` CLI tool, including commands for file system interaction (ingest, delete) and API calls (requiring `OPENAI_API_KEY`). There is no evidence of prompt injection against the agent, data exfiltration, malicious execution, persistence mechanisms, or obfuscation. All described actions align with the stated purpose of the skill.