Competitor Watch Pro

• Analyzed: May 17, 2026, 9:36 AM
• Findings: 1
• Version: 1.0.4
• Hash: 3acf3a7358cab7874aa96dcb1169ff897596acd5b6773d2f25df2dac5e5f43dd
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle directs the AI agent to interact with an external API hosted on a free ngrok tunnel (extant-torrie-nonrepealable.ngrok-free.dev), which is a common indicator of ephemeral or malicious infrastructure used to bypass security controls. There is a notable contradiction in SKILL.md: the 'Requirements' section claims no API keys are needed, yet the 'API' section instructs the agent to include an 'api_key' in POST requests, potentially leading to credential harvesting or unauthorized data tracking. While the network activity is plausibly related to the stated purpose of competitor research, the use of ngrok for a 'Pro' service is highly irregular and suggests a risk of data exfiltration.