CDN

• Analyzed: May 14, 2026, 3:59 AM
• Findings: 1
• Version: 1.0.1
• Hash: 209c7f924aad97195f5580c587e96d3d98e21f9961f2569ed436f95ff83ba781
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides comprehensive documentation and examples for CDN management, including `curl` commands interacting with CDN APIs using environment variables (e.g., `$CF_TOKEN`, `$BUNNY_API_KEY`) and `iptables` commands for firewall configuration in `providers.md` and `security.md`. While these commands are legitimate for system administration and security hardening, their direct execution by an AI agent without robust input validation, sandboxing, or explicit user confirmation presents a significant vulnerability risk. Specifically, `iptables` can cause denial of service or unintended network changes, and API calls with credentials could be misused if the agent's secret handling is insecure. There is no evidence of intentional malicious behavior, but the presence of these high-risk capabilities warrants a 'suspicious' classification due to potential for exploitation if the agent's execution environment is not adequately secured.