Japan

• Analyzed: May 11, 2026, 4:55 AM
• Findings: 1
• Version: 1.0.0
• Hash: b8c75bf452979a667a3939d5fd3944210752bb413bbbfbb5a30d52cd4d801f5c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to the direct instruction for the AI agent to execute a shell command (`mkdir -p ~/japan`) found in `setup.md`. While this specific command is benign and intended for local directory creation, the presence of direct shell command execution instructions within a markdown file interpreted by an AI agent represents a risky capability. This highlights a potential prompt injection attack surface, even though there is no clear evidence of malicious intent, data exfiltration, or unauthorized network requests within the provided files. The skill explicitly states it does not access files outside `~/japan/` or make network requests, which is a positive indicator of intent.