Foundry

• Analyzed: May 12, 2026, 3:16 AM
• Findings: 1
• Version: 0.1.0
• Hash: 49ae2fba3f4e4c6c83a210748dbcdb82a1b6b41fe58fd969fa5141abfd50d1e0
• Source: palm
• External report: View on VirusTotal

Findings (1)

This skill describes a highly capable, self-modifying AI agent that can research, generate, and integrate new code (extensions, tools, hooks, skills) into itself and publish them to a marketplace. While the `SKILL.md` explicitly mentions security controls like blocking `child_process`, `eval`, and access to sensitive directories (`~/.ssh`, `~/.aws`), sandboxing, and human review, the core functionality of arbitrary code generation and self-modification (demonstrated by `foundry_extend_self` with `toolCode` in SKILL.md) presents a significant attack surface and high inherent risk, even if not immediately malicious. The ability to `autoPublish` to an external marketplace (`api.claw.getfoundry.app`) further elevates the risk profile.