Refua

• Analyzed: May 12, 2026, 3:15 AM
• Findings: 1
• Version: 0.4.1
• Hash: 2e7ba152b217df33b213a979e25d786a9c6e856f80f6babe59fd5b2bb2075c7f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle describes a scientific computing tool for drug discovery. The `SKILL.md` provides instructions for installing Python packages (`pip install refua`, `refua-mcp`), downloading model assets (`python -c "from refua import download_assets; download_assets()"`), and starting a local server (`python3 -m refua_mcp.server`). All described actions are consistent with the stated purpose of setting up and running a complex machine learning-based scientific application. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. The file system writes (for model assets) and network server capabilities are aligned with the skill's legitimate function.