Bytenite

• Analyzed: Apr 30, 2026, 3:32 PM
• Findings: 1
• Version: 1.0.2
• Hash: 9486e1ed835ad000cbda3b12d305727f6cac007ccf1b6e0deb71c00692f65b26
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill requires the installation of a global npm package (@membranehq/cli) and directs the agent to route all authentication and API interactions through the Membrane third-party platform. While these actions are consistent with the stated purpose of integrating ByteNite, the reliance on external binaries and a middleware proxy for sensitive cloud infrastructure credentials creates a significant attack surface and potential for data interception. The instructions in SKILL.md guide the agent through a headless authentication flow and proxying mechanism that centralizes control and data flow within the Membrane ecosystem, which is a high-risk pattern for an automated agent.