Cloud Compliance Checker

• Analyzed: Mar 21, 2026, 8:16 AM
• Findings: 1
• Version: 1.0.0
• Hash: e6565ce0be759e28f59c93ee20b750686e2ec50db06aa4d737aa5c67fd47bdb2
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill facilitates the transmission of cloud infrastructure configuration data to an external third-party API (api.mkkpro.com) for compliance auditing. While this behavior is consistent with the stated purpose of the 'Cloud Compliance Checker', sending detailed cloud metadata to a remote endpoint is a high-risk activity that could lead to data exposure or reconnaissance. The 'config' parameter in SKILL.md and openapi.json is loosely defined, potentially encouraging the inclusion of sensitive environment details. No explicit malicious code or prompt injection was found, but the inherent risk of the data transit warrants a suspicious classification.