Taxi

• Analyzed: May 12, 2026, 4:15 AM
• Findings: 1
• Version: 1.0.0
• Hash: 52e0a68b3f065ead99e8da9b4914074b7e79459d0e4d40657ef31566ac301c29
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is primarily documentation and instructions for an AI agent to manage taxi services. All instructions in SKILL.md and other markdown files are aligned with the stated purpose and do not contain malicious prompt injection attempts. However, the `memory-template.md` file includes a direct shell command instruction (`mkdir -p ~/taxi`). While this specific command is benign and necessary for the skill's setup, it demonstrates the agent's capability to execute shell commands from markdown. This represents a significant vulnerability risk (e.g., shell injection) if the agent's runtime environment does not adequately sandbox or sanitize commands, even though no malicious intent is present in this specific instance.