Credential Auditor

• Analyzed: May 10, 2026, 6:28 AM
• Findings: 1
• Version: 1.0.0
• Hash: 1f5ff6f0c54a3c70f188c939b803f82d82b481dae1c2ec390d57d588337f3e33
• Source: palm
• External report: View on VirusTotal

Findings (1)

The bundle provides a framework for automated credential auditing and brute-forcing. While the Python scripts (such as brute_force.py and wordlist_generator.py) are largely stubs or simple logic for string manipulation and local database matching, the SKILL.md instructions direct the AI agent to perform high-risk network activities, including automated password cracking across multiple protocols (SSH, RDP, FTP) and testing targets against a database of 500+ default credentials (device_passwords.json). Although the tool lacks evidence of intentional malice or data exfiltration, its core purpose involves high-risk capabilities that require strict authorization.