Veadk Go Skills

• Analyzed: May 11, 2026, 4:57 AM
• Findings: 1
• Version: 1.0.0
• Hash: 3ffabd99097c860c1312d1ae8e12b8af371134ead109ab63462cede1261e3360
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed for AI agent code generation and conversion, which is inherently a high-risk capability. The `SKILL.md` file explicitly instructs the agent to "call a script to save the code artifact" to `agent_name/agent.py`, indicating the agent has file write and script execution capabilities. While the provided code examples are benign, the ability to generate arbitrary code (Go or Python) and save it, combined with the agent's capacity to define powerful tools (e.g., `web_search` for network access as shown in `common/tools.md`) and manipulate execution flow via callbacks (`common/callback.md`), creates a significant Remote Code Execution (RCE) vulnerability via prompt injection. There is no direct malicious intent in the provided files, but the broad permissions and code generation capabilities are highly susceptible to abuse.