Supernal Interface CLI

• Analyzed: May 11, 2026, 5:01 AM
• Findings: 1
• Version: 1.0.0
• Hash: ead8bdee0dc3eaa2a76ef4182d6ad1cf33c5921aceba12e80ec53f0db1d722c0
• Source: palm
• External report: View on VirusTotal

Findings (1)

The `SKILL.md` describes a CLI tool with extensive, high-privilege capabilities that, while plausible for a development tool, introduce significant risk. Key indicators include `npm install -g @supernal/interface` for global package installation, `si setup-mcp` which configures IDEs and creates servers, and `si setup-claude` which installs other skills and agents. These commands grant broad system access, file system modification, and the ability to introduce further executable components, elevating the risk profile beyond benign, despite no explicit malicious intent or prompt injection attempts found within the `SKILL.md` itself.