Appwrite

• Analyzed: Apr 30, 2026, 3:22 PM
• Findings: 1
• Version: 1.0.2
• Hash: 40433c1c6cd5638ceb043e5114aa70d020fe90a8dc91a640eb38eb8b8b5710d7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill facilitates Appwrite integration by instructing the agent to install a global NPM package (@membranehq/cli) and route all API traffic through the Membrane third-party platform. While these actions are aligned with the stated purpose of using Membrane as a middleware, the requirement for global software installation and the use of an external proxy for authentication and API requests constitute high-risk capabilities under the provided criteria. No evidence of intentional malice, data exfiltration, or harmful prompt injection was found in SKILL.md or _meta.json.