Arbitrum Dapp Skill

• Analyzed: May 12, 2026, 3:24 AM
• Findings: 1
• Version: 1.1.0
• Hash: 4166e358f816bab86ebe4f09ccf946203a137652cb85847fa3ead5f815605fa6
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is generally benign, providing comprehensive documentation and scripts for Arbitrum dApp development. However, the `install.sh` script includes a network call to `arbitrum-dapp-skill.goatcounter.com` to send an anonymous install count. While the script explicitly states this is privacy-friendly with no personal data and an opt-out mechanism, any external network call from an install script represents a risky capability without clear malicious intent, thus classifying it as suspicious.