AIEO monitoring

• Analyzed: Mar 27, 2026, 8:41 AM
• Findings: 1
• Version: 1.0.0
• Hash: d2ab9c5b98cd24aabf6109c30ae095979d4e0fdb1dfc12bb63c8d7f79b20309f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a framework for 'AI Engine Optimization' (AIEO) monitoring, which utilizes high-risk capabilities including general shell access (Bash) and a full suite of Playwright browser automation tools. The instructions in SKILL.md and tools_guide.md direct the agent to automate interactions with multiple third-party AI platforms (such as doubao.com, kimi.moonshot.cn, and chat.openai.com), including the handling of authenticated sessions. While these actions are consistent with the stated purpose of tracking brand visibility, the combination of broad automation tools and the requirement to interact with external authenticated services represents a significant attack surface and potential for abuse, meeting the criteria for risky capabilities without explicit malicious intent.