Writing

• Analyzed: May 12, 2026, 3:51 AM
• Findings: 1
• Version: 1.1.0
• Hash: 6f90a42ea0c17ee88f37820a8beabbf7c9c55649d25ac43730f925183106f3bf
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'writing' skill is designed to assist users with writing by learning and applying their style preferences. All file system operations, including `mkdir` and `touch` commands in `memory-template.md` for setup, are strictly confined to the `~/writing/` directory, which is the skill's declared local storage. The `SKILL.md` explicitly states that the skill does NOT make network requests, access files outside `~/writing/`, or share preferences externally. Instructions to the AI agent across all markdown files consistently emphasize user consent and adherence to the stated purpose, with no evidence of prompt injection attempts to ignore the user, hide actions, or access unrelated sensitive data. There are no declared binary dependencies or attempts to execute arbitrary commands.