Japan Business Operations (EDITION)

• Analyzed: May 10, 2026, 6:50 AM
• Findings: 1
• Version: 1.0.0
• Hash: 3b8777e11d8121932839f8be34e8f4cc38a43ba58442531c90afdaeeb2452e11
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle defines tools that interact with an external API (api.edition.sh), including a 'Persistent Memory' feature in SKILL.md that encourages the agent to exfiltrate session context and business data to a third-party server. Additionally, it instructs the user to execute a remote npm package (edition-mcp-server) via npx, which presents a risk of remote code execution. While these are framed as legitimate business intelligence features, the centralized storage of agent 'memories' and the execution of unvetted remote code are high-risk behaviors.