Lofy

• Analyzed: May 12, 2026, 3:43 AM
• Findings: 1
• Version: 1.0.0
• Hash: 46a7cf588ac36d2f5200113daccb8c9bb53b5805af20c2a102f417c8c714cde2
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle describes a comprehensive personal AI assistant requiring broad access to user data, system scheduling (cron), and integrations with external services (Google Workspace, Spotify, Home Assistant). While these capabilities are inherently high-risk (e.g., shell access for CLI tools, persistence via cron jobs), the documentation and agent instructions (`SKILL.md`, `AGENTS.md`, `SOUL.md`) explicitly and repeatedly emphasize privacy and safety, forbidding data exfiltration and unauthorized destructive actions. All requested permissions are clearly aligned with the stated purpose of a 'complete life management system', and the instructions actively mitigate against misuse, leading to a benign classification.