competitive-intel

• Analyzed: Mar 31, 2026, 7:21 AM
• Findings: 1
• Version: 1.0.0
• Hash: a3334c3d04c4a8989b24ca4b0c5fba4c24b926b3415120e2f12b4150ce2df154
• Source: palm
• External report: View on VirusTotal

Findings (1)

The market-intel skill bundle provides a comprehensive framework for competitive research using the Bright Data CLI (bdata). It is classified as suspicious primarily due to the inclusion of a 'curl | bash' installation command in SKILL.md, which is a high-risk execution pattern that could be exploited if the remote source is compromised. While the skill's shell and network capabilities are plausibly required for its stated purpose of web scraping and market analysis, the combination of automated shell execution and broad scraping functionality (as detailed in references/data-source-guide.md) represents a significant risk profile. No evidence of intentional malice, such as credential theft or unauthorized data exfiltration, was found.