AgentKVM

• Analyzed: May 14, 2026, 7:06 AM
• Findings: 1
• Version: 0.2.1
• Hash: 334e4c61e9b926c32320d45eff92289a51830cc43765b1455fc2833ee8f0c4e9
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides high-risk capabilities including full-screen capture and remote input injection (keyboard/mouse) for physical devices via NanoKVM hardware. It includes a built-in HTTP server (`agentkvm serve`) for remote operation and explicitly instructs the agent to handle sensitive tasks like typing passwords on connected machines (`SKILL.md`). While these features are aligned with the stated purpose of hardware automation, the broad control over target systems and the potential for remote access via the HTTP API (`references/api.md`) represent significant security risks.