Macro Monitor

• Analyzed: May 12, 2026, 3:51 AM
• Findings: 1
• Version: 1.0.2
• Hash: f9e0319ab2f4efc8ee6d17ae7db7eefdf98111d0061606f91aedd0566240e340
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to a prompt injection vulnerability in the SKILL.md file where the `message` tool instruction is incomplete, potentially allowing the AI agent to generate or infer message content beyond the intended 'organized report'. Additionally, the skill includes an optional instruction for the agent to update its local knowledge base file (references/indicators.md), granting it file write capabilities within its workspace. While the stated purpose of the skill (macro data monitoring) is benign and there is no evidence of intentional malicious activity, these capabilities represent potential vulnerabilities or risky behaviors that could be exploited under different circumstances.