Quodd

• Analyzed: May 12, 2026, 3:22 AM
• Findings: 1
• Version: 0.1.2
• Hash: 4bab077e9f542d327866c407bb5dbacc42c438992d2db0e62f4c9c1a35716cc0
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate tool for fetching stock quotes from the Quodd API. It uses standard Python libraries (urllib) to authenticate and retrieve data, correctly handles API credentials via environment variables, and implements a standard token caching mechanism in the user's home directory. No evidence of data exfiltration, malicious execution, or prompt injection was found in scripts/quote.py or SKILL.md.