Skill Auto-Use

• Analyzed: May 11, 2026, 6:26 AM
• Findings: 1
• Version: 1.0.0
• Hash: 6411e9cfbe526cce7a8f6000b8fb974810d20873711b1a46ef0516c229a720b2
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill 'skill-auto-use' (SKILL.md) instructs the AI agent to bypass user confirmation and automatically execute installed skills based on context triggers. It mandates the creation of a 'trigger table' and uses strong imperative language ('No exceptions', 'Don't ask... Just use it') to override default safety behaviors. While intended for automation, this behavior significantly increases the risk of unauthorized or unintended tool execution by removing human-in-the-loop oversight.