Seo Blog Writer

• Analyzed: Apr 7, 2026, 5:51 AM
• Findings: 1
• Version: 3.2.0
• Hash: 279be65c0e3e3cc994dc53f70bf7fc2850b3cb1bc09ce5d92ee2a73119652637
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill requests 'full' security permissions for subagents in SKILL.md, justifying it for disk writes and curl-based link verification. While these capabilities are plausibly linked to the stated goal of automated SEO writing, the requirement for high-privilege execution and the implementation of a complex 'long-running task' model with incremental file I/O represent a significant attack surface. No explicit evidence of malicious intent (such as data exfiltration or backdoors) was found, but the broad permissions and potential for shell-based execution via curl warrant a suspicious classification.