Cheese Brain

• Analyzed: May 12, 2026, 4:15 AM
• Findings: 1
• Version: 1.0.1
• Hash: b77ab952ea7b72f4c029b8b85c0ba09f2b3a989d9d590138ae6b548681ce7815
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to store sensitive information such as 'credentials', 'tokens', and 'config' within its local DuckDB database, as explicitly stated in SKILL.md. While it includes features like 'Sensitive redaction' and advises against storing secrets in plain text, the inherent capability to store such data locally presents a significant vulnerability for data at rest. Furthermore, the `data` field can store `run_command` strings, which, if later executed by the AI agent, could lead to arbitrary code execution. There is no evidence of intentional malicious behavior like data exfiltration or backdoor installation, but these risky capabilities make the skill suspicious.