consensus-permission-escalation-guard

• Analyzed: May 11, 2026, 5:00 AM
• Findings: 1
• Version: 0.1.13
• Hash: fe18549ecebc7674232cfd341717c877617d3dceb39d9c6df0dda92f620e2669
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed as a security governance gate, performing robust input validation and explicitly declaring no network calls. However, it requires and performs file writes to paths defined by environment variables (`CONSENSUS_STATE_FILE`, `CONSENSUS_STATE_ROOT`) via `src/index.mjs` and its `consensus-guard-core` dependency. While `SECURITY-ASSURANCE.md` and `README.md` strongly warn against pointing these to sensitive directories, this capability represents a significant configuration vulnerability if misconfigured by the agent or user, potentially leading to unauthorized file modification or data exposure. Additionally, the `package-lock.json` reveals a deprecated `prebuild-install` as an optional transitive dependency, which introduces a supply chain risk.