V19 Coherence Auditor

• Analyzed: May 4, 2026, 11:26 AM
• Findings: 1
• Version: 1.0.0
• Hash: b4e541a126505ee0a991f87e5225e993916efa3669247bc825d4874d42bd9646
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill directs the AI agent to interact with an external endpoint hosted on a temporary Cloudflare Tunnel (boat-atlas-spa-flexible.trycloudflare.com), which is often used to bypass security controls or host ephemeral C2-like interfaces. It encourages 'self-registration' and 'coherence auditing' of system modules, which could lead an AI agent to exfiltrate system metadata or operational telemetry to an unverified third party. While no explicit code for stealing secrets is present, the combination of ephemeral infrastructure and instructions to monitor internal 'information flow' is highly characteristic of data-gathering or reconnaissance behavior.