SMS Gateway

• Analyzed: May 11, 2026, 6:35 AM
• Findings: 1
• Version: 0.0.4
• Hash: fbf9b751a42b210652e1eb47ce7dbca5a5b98481bf60bed7df054b3ab56778b7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate interface for a self-hosted GSM SMS gateway. It consists of shell scripts (send_sms.sh, receive_sms.sh) that interact with a local API using curl and jq, and includes security features such as a mandatory API key and a phone number allowlist (allowlist.json) to prevent unauthorized usage. No evidence of data exfiltration, malicious execution, or prompt injection was found.