Html Anything

• Analyzed: May 12, 2026, 2:56 AM
• Findings: 1
• Version: 0.1.0
• Hash: 7a6f22bdf6a128d185cbd5faf6ca99826f59f9ed2559f814fab0fd9687aedb07
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'html-anything' skill is a sophisticated framework designed to transform various data sources—including sensitive personal information like financial records, medical visits, and browser history—into polished, interactive HTML visualizations. The bundle contains extensive and explicit privacy-preserving instructions, such as 'hard rules' for offline-only rendering, masking PII (emails, phone numbers, and addresses) by default, and forbidding external network calls to third-party APIs or CDNs during the generation process. The instructions (found in SKILL.md and various source-specific prompts like _sensitive.md and _finance.md) are consistently defensive, directing the agent to act as a neutral organizer and explicitly prohibiting it from offering professional medical, legal, or financial advice.