Research Tracker

• Analyzed: May 12, 2026, 3:04 AM
• Findings: 1
• Version: 0.1.0
• Hash: ba6db00e538a35b59ecadebc831140fdfda9682777e808fe0f9a6f14f0312c44
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as suspicious primarily due to its reliance on external, potentially untrusted sources for installation. The `SKILL.md` instructs the AI agent to install a tool via `brew tap 1645labs/tap && brew install julians-research-tracker` or `go install github.com/1645labs/julians-research-tracker/cmd/research@latest`. This introduces a significant supply chain risk, as the integrity of the `1645labs` Homebrew tap or the specified Go repository cannot be guaranteed, potentially leading to the installation of malicious software. While the skill's stated purpose and internal instructions appear benign, the method of acquiring its core functionality is a high-risk behavior.