Landing Gen

• Analyzed: May 12, 2026, 4:26 AM
• Findings: 1
• Version: 1.1.1
• Hash: 2089113e09cc708063e5b12fb5deeb28f24b10ec8242ee7dad7c74870d0346d4
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill requests broad permissions, including `Bash` execution, `Read`, `Write`, and `Edit` file system access in `SKILL.md`. While the explicit instructions within the skill are aligned with its stated purpose of generating and scaffolding landing pages, the allowance of `Bash` execution introduces a significant vulnerability for arbitrary code execution (RCE) if the AI agent were to be compromised or misused through prompt injection, even though the skill itself does not contain explicit malicious instructions.