Trade Signal

• Analyzed: May 12, 2026, 3:16 AM
• Findings: 1
• Version: 1.0.6
• Hash: b6e9abb0e38648381cb8865f610900475e11caa440e5002c603423c0606219e1
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. The `SKILL.md` provides clear instructions for a trade signal tool and does not contain any prompt injection attempts. The `scripts/search.sh` script legitimately uses `python3` for URL encoding and `curl` to send the user's query to the specified external API endpoint `https://app.terminal-x.ai/api/lite-search`. There is no evidence of data exfiltration, malicious execution, persistence, or obfuscation beyond the skill's stated purpose.