Trakt

• Analyzed: May 13, 2026, 3:01 AM
• Findings: 1
• Version: 0.1.0
• Hash: 8581292c64f56b41d08e0ddee57cab5b873610a50e31fe6b6b297e17b98adae0
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to interact with trakt.tv for watch history and search, which aligns with its stated purpose. However, the `SKILL.md` file includes an instruction to install `trakt-cli` globally via `npm install -g trakt-cli`. While this is a standard method for installing CLI tools and is necessary for the skill's functionality, it represents a high-privilege operation that could lead to arbitrary code execution if the `trakt-cli` npm package were compromised, posing a supply chain risk. This constitutes a risky capability without clear malicious intent from the skill author, classifying it as suspicious.