Report

• Analyzed: May 12, 2026, 3:57 AM
• Findings: 1
• Version: 1.0.3
• Hash: 4f68b415b6168c7dfc2ff320a0e98c7170dc46dacd99c34a897b60af3a8950e2
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill's stated purpose of report generation and delivery is benign. However, it presents several potential vulnerabilities that could be exploited by a malicious user of the skill. The `delivery.md` file instructs the agent to create cron jobs with payloads containing user-defined strings (e.g., `{report-name}`, `{channel}`), which could be vectors for prompt injection or command injection if not properly sanitized by the agent. Additionally, `formats.md` uses `browser action=pdf targetUrl=file:///path.html`, where `path.html` could be manipulated for local file disclosure. The `schema.md` also defines a 'Data Prompt' field, a user-controlled string that could be used for prompt injection against the agent. These capabilities, while functional, introduce significant risks if the agent's execution environment lacks robust input sanitization and sandboxing.