little-snitch

• Analyzed: May 12, 2026, 3:05 AM
• Findings: 1
• Version: 1.0.1
• Hash: 5069c0c1c245104f4203f9eb7b98c7f9815309dcb771f277766ff18d115d77d6
• Source: palm
• External report: View on VirusTotal

Findings (1)

This skill is classified as suspicious due to its provision of extensive root-level access to the powerful `littlesnitch` firewall utility on macOS. While the `SKILL.md` documentation itself does not contain explicit malicious instructions or prompt injection, it exposes commands like `sudo littlesnitch profile`, `sudo littlesnitch rulegroup`, `sudo littlesnitch write-preference`, and `sudo littlesnitch export-model`. These commands, especially with root privileges, allow the AI agent to disable firewall rules, modify system network preferences, and export sensitive firewall configurations, which could be misused for persistence, data exfiltration, or disabling security. The `SKILL.md` even includes a 'Security Warning' from the original documentation, highlighting the potential for misuse by malware.