Schema Markup Generator

• Analyzed: May 14, 2026, 4:57 AM
• Findings: 1
• Version: 1.0.1
• Hash: 30b9e2a11c469d6f6845f5e64efe08d34545fa4eb6776cd83796efd0c03e9c65
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to critical vulnerabilities allowing arbitrary local file reads and Server-Side Request Forgery (SSRF). The scripts `batch_generate.py`, `generate_schema.py`, and `validate_schema.py` accept user-provided file paths, enabling an attacker to read any file on the system. Additionally, `batch_generate.py` and `generate_schema.py` fetch content from user-supplied URLs, which could be exploited for SSRF to probe internal networks or access sensitive endpoints. While the skill's stated purpose is benign, these implementation flaws introduce significant security risks.