plaid

• Analyzed: May 13, 2026, 3:00 AM
• Findings: 1
• Version: 0.0.3
• Hash: cb4f0a1b6b483962458fa98032faeda93f7c2e6e13add9fc5e821adc8b0851ed
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It provides instructions for installing and using `plaid-cli` to interact with the Plaid finance platform. The `SKILL.md` explicitly instructs the agent not to print or log secrets, which is a positive security indicator. All commands are standard for a CLI tool, involving local file operations (`/tmp` for state management) and `jq` for local data processing. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or obfuscation.