Marketplace

• Analyzed: May 12, 2026, 3:55 AM
• Findings: 1
• Version: 1.0.1
• Hash: 326c7a47a8d4ad85dce3fa5eea238598b73702077bc6431990888145c1c6404d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle consists entirely of markdown documentation and a metadata file. There is no executable code (Python, shell scripts, etc.) present. The `_meta.json` explicitly states `"bins": []`, indicating no external binaries are required. The `SKILL.md` and other `.md` files provide detailed, informational guides for an AI agent on marketplace topics, including warnings about common AI pitfalls (e.g., outdated information). While `SKILL.md` instructs the agent to use 'Real-Time Data' and 'verify current marketplace state', this is framed as a measure for accuracy and safety, not as a prompt injection for malicious network activity or data exfiltration. There is no evidence of intentional harmful behavior, unauthorized access, or obfuscation.