southeast-asia-arrival-card

• Analyzed: Apr 1, 2026, 1:21 PM
• Findings: 1
• Version: 1.0.3
• Hash: 7286e3539af782ddc4e772f3b2c9d62e8141e5e380d44a8e9356ff3d035cdfd1
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'southeast-asia-arrival-card' skill bundle is a comprehensive assistant designed to help users complete arrival cards and visa applications for various Asian countries. It utilizes the 'read_image' tool to extract sensitive PII (names, passport numbers, and travel details) from user-uploaded documents like passports and tickets, and provides detailed guides and automation pseudo-code (found in 'SKILL.md' and 'reference/automation-framework.md'). While the handling of passport data is high-risk, the instructions are transparent, strictly aligned with the stated helpful purpose, and show no evidence of malicious intent, data exfiltration, or unauthorized execution. All external links point to legitimate government domains (e.g., .gov.sg, .go.th, .gov.my).