pip

• Analyzed: May 11, 2026, 6:33 AM
• Findings: 1
• Version: 1.0.0
• Hash: a131539e1317592394220527159631aaddf93165d39cee3cdcb05ee51d44c703
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate and safety-oriented wrapper for Python's pip package manager. The instructions in SKILL.md and the helper script scripts/pip-safe.sh promote best practices such as using virtual environments (venv) and avoiding global installs, with no evidence of data exfiltration, malicious execution, or prompt injection.