brand knowledge base

• Analyzed: May 11, 2026, 1:27 AM
• Findings: 1
• Version: 1.0.1
• Hash: feeaf4e2aa3bd4329bd8ed88b30cc1e7227f74e66407e4855c39dbc3c6672f1f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'brand-knowledge-base-builder' skill is a legitimate tool designed to structure unstructured brand data into standardized formats (JSON, Markdown, etc.). The Python logic in `main.py` includes explicit security checks to prevent path traversal and limits file access to the workspace. The skill documentation (`SKILL.md` and `manifest.json`) provides clear privacy warnings regarding data being sent to LLM APIs and emphasizes the need for manual review. No evidence of malicious intent, data exfiltration to unauthorized endpoints, or prompt-injection attacks was found.