RobotX Deploy CLI

• Analyzed: May 11, 2026, 5:31 AM
• Findings: 1
• Version: 1.0.1
• Hash: 63150ae943cfc4af2ca5ea46823f560188147003ae373f6456cebe5d52549cfa
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill instructions in SKILL.md direct the agent to install software using 'curl | bash' from a remote GitHub repository (haibingtown/robotx_cli), which is a high-risk pattern that could lead to arbitrary code execution. While the tool's stated purpose is application deployment, the instructions encourage the agent to execute unverified remote scripts and manage sensitive credentials (ROBOTX_API_KEY), posing a significant security risk if the remote source is compromised.