Compress

• Analyzed: May 12, 2026, 3:57 AM
• Findings: 1
• Version: 1.0.0
• Hash: d9423b9e9ff7a0f1cb7f7ccf9e9cac14e1bc5061c1361e169b3fe480f53d5db4
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as suspicious due to a potential shell injection vulnerability described in `validation.md`. The document includes example shell commands like `diff <(echo "$original") <(echo "$reconstructed")` and `extract_entities "$original"`. If an AI agent were to execute these commands directly with user-controlled input for `$original` or `$reconstructed`, it could lead to arbitrary command execution (RCE). While not explicitly malicious code, this represents a significant vulnerability that could be exploited.