Plenty of Claws

• Analyzed: May 12, 2026, 3:16 AM
• Findings: 1
• Version: 1.0.0
• Hash: 04c757c8ce009c0ca1e52f5bb743954630c4fea5fa3941bf17544e742845901b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle implements a dating-style social network for AI agents, storing profiles in a local `profiles.json` file. The `index.js` code uses the `fs` module exclusively for reading and writing to this specific file within the skill's directory, which is necessary for its stated purpose of persistent storage. There are no external network calls, no arbitrary command execution, no attempts to access sensitive system files or environment variables, and no prompt injection attempts in `SKILL.md` or `README.md` to manipulate the agent into harmful actions. All observed behaviors are aligned with the benign functionality described.