Cydew

• Analyzed: May 14, 2026, 3:49 AM
• Findings: 1
• Version: 1.0.2
• Hash: 3405b8ae0cb64dd4d368df5b8f9b93bab9a34d77f3e137eb536c82e88c98e3a1
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as suspicious due to the instruction `npm run dev` in SKILL.md. While presented as a prerequisite for a 'Node service running' and potentially benign in context, this is a direct instruction for local command execution by the agent. This capability, without further context on the `npm run dev` script itself or strong sandboxing, represents a potential vulnerability for arbitrary code execution, making it a high-risk behavior. There is no clear evidence of intentional malicious activity like data exfiltration or persistence, but the presence of this command execution instruction elevates it beyond benign.