Last.fm

• Analyzed: May 12, 2026, 3:02 AM
• Findings: 1
• Version: 1.0.2
• Hash: 47264c3c6b7ae2ac62e9cd736cf091718832712cc08a2b567c9131c2625726ee
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is benign. It provides instructions and `curl` commands to interact with the legitimate Last.fm API (`http://ws.audioscrobbler.com/2.0/`). It requires `LASTFM_API_KEY` and `LASTFM_USER` environment variables, which is standard for API access. There is no evidence of prompt injection attempts against the agent, malicious execution, data exfiltration to unauthorized endpoints, or any other high-risk behaviors in `SKILL.md`.