Discord skill

• Analyzed: May 5, 2026, 4:41 PM
• Findings: 1
• Version: 1.0.0
• Hash: 97407310c12d24e898cfb282b1d49e1d11f63de4b85936f158a1da3058da2659
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides comprehensive Discord control, including messaging, moderation, and channel management. A significant security risk is identified in 'SKILL.md', which explicitly instructs the agent to use 'file:///' URIs for media uploads, potentially allowing for the exfiltration of sensitive local files (e.g., credentials or configuration) if the agent is misdirected. While the skill includes action gating to restrict sensitive functions like moderation and role management, the inclusion of arbitrary local file access is a high-risk capability that warrants caution.