Pay a Human

• Analyzed: May 12, 2026, 3:51 AM
• Findings: 1
• Version: 1.0.0
• Hash: 3f54e49e45281f83d317894ababed01db786b671f2361c52fcf1035af62b439d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to its core functionality involving financial transactions and the ability to create webhooks with arbitrary `targetUrl`s. While the skill itself does not contain explicit malicious instructions or code, these capabilities present a significant risk for misuse through prompt injection against the AI agent. An attacker could potentially instruct the agent to make unauthorized payments or create webhooks pointing to attacker-controlled servers to exfiltrate data or establish callbacks, leveraging the `curl` commands documented in `SKILL.md`.