源码分析

• Analyzed: May 11, 2026, 2:56 PM
• Findings: 1
• Version: 1.0.1
• Hash: 42b29ee6d69f3bbb2ce5811bceebfbaa778b4a23950a44155db8a52500582bfd
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a specialized toolkit for reverse-engineering AI Agent architectures and extracting system prompts from GitHub repositories, npm packages, and compiled binaries. It utilizes standard utilities such as `curl`, `npm pack`, and `grep` (specifically in `scripts/extract-prompts.sh`) to identify architectural patterns, tool definitions, and behavioral instructions. While the tool facilitates 'prompt leaking' of third-party agents, its operations are transparently documented, restricted to the stated analysis goals, and show no evidence of malicious intent, data exfiltration, or unauthorized persistence.