Taku Review

• Analyzed: May 12, 2026, 3:21 AM
• Findings: 1
• Version: 1.0.0
• Hash: 114b0c854edcdae732fdb6086bcfc0e1060cb208ea756e04e755883e6286b8f6
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'taku-review' skill is a legitimate code review utility designed to analyze git diffs for security vulnerabilities and quality issues. In SKILL.md, it defines a structured process for identifying risks like SQL injection and prompt injection while explicitly forbidding the agent from committing or pushing changes. The use of Bash and file tools is strictly scoped to repository analysis and local auto-fixes, showing no signs of malicious intent or data exfiltration.