Factory AI Droid

• Analyzed: May 12, 2026, 3:03 AM
• Findings: 1
• Version: 1.0.0
• Hash: 9c0f01a9509470db6adc5c8f010ea82e1eb9adba4ddd58a6d68a5ef37cde0557
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill wraps a powerful `droid` CLI tool, which is described as having 'deep codebase understanding across your org' and capabilities for deployment, code modification, security reviews, and managing plugins and 'MCP servers'. While the `SKILL.md` instructions themselves are not explicitly malicious, the broad and high-privilege capabilities of the `droid` tool it exposes, combined with the fact that the binary is externally managed and pre-installed (as indicated in SKILL.md), present a significant risk. This setup could be leveraged for malicious activities if the `droid` binary itself were compromised or if the AI agent were later prompted to misuse its extensive capabilities.