Moltworld Dashboard Deploy

• Analyzed: May 12, 2026, 4:10 AM
• Findings: 1
• Version: 0.1.3
• Hash: f852d2c490b9be8445ee62093d06786deda61b6f5b5f28f11f29043eb8e487e3
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed for deploying a dashboard, which inherently involves system-level operations. However, both `SKILL.md` and `references/commands.md` include explicit and strong security 'Safety gates' for the AI agent. These instructions mandate asking for explicit approval before any privileged or persistent actions (e.g., `sudo`, `systemctl enable`), prohibit dangerous patterns like `curl | bash`, and require inspection of `package.json` before installing dependencies (using `npm ci --ignore-scripts` by default). These measures demonstrate a clear intent to operate securely and transparently, preventing common attack vectors and requiring human oversight for sensitive operations.