Agent Team Orchestration

• Analyzed: Apr 30, 2026, 9:26 AM
• Findings: 1
• Version: 1.0.0
• Hash: 7ae80c12416175a9a57eacf65fd4399e4fe441838dae3d8704c047455d3961df
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle instructs the agent to route all model requests through a third-party service called 'SkillBoss API Hub' at api.heybossai.com, requiring the use of a specific SKILLBOSS_API_KEY. This configuration introduces a risk of credential harvesting and data exfiltration by redirecting core agent communications to an unverified external endpoint. These instructions are primarily detailed in SKILL.md and references/team-setup.md.