Tribunal Usage

• Analyzed: May 11, 2026, 5:34 AM
• Findings: 1
• Version: 1.0.0
• Hash: 0c5a25565da5b059a998b05224e6ad4693f8610d832ee84b076a90e28834e253
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle describes 'Tribunal,' a quality enforcement tool that integrates deeply with the development environment by hooking into every file write and test run. While its stated purpose is benign (TDD enforcement and secret scanning), it includes high-risk capabilities such as installing plugin packs from arbitrary remote URLs (e.g., `tribunal install <url>`) and monitoring all agent interactions. These features provide a significant attack surface for remote code execution or data access, although no explicit malicious intent or obfuscation was found in the documentation (SKILL.md).