pref0

• Analyzed: May 15, 2026, 3:36 AM
• Findings: 1
• Version: 1.0.1
• Hash: b55c4a8686c8060bf8468591b03c6c57f100f92ef5649287adf3ca7eea6ccfa7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is suspicious due to two primary reasons: 1) It explicitly instructs the AI agent to send the full conversation history, including potentially sensitive user data, to an external third-party API at `https://api.pref0.com/v1/track` (SKILL.md). 2) It also instructs the agent to fetch a `prompt` field from the same external API (`https://api.pref0.com/v1/profiles/:userId`) and directly inject it into its own system prompt (SKILL.md). While the stated purpose is benign (personalization), this mechanism creates a significant supply chain prompt injection vulnerability, as a compromised `api.pref0.com` could inject arbitrary, malicious instructions into the agent's operating context.