Carapace — Shared Knowledge Base for AI Agents

• Analyzed: May 12, 2026, 3:15 AM
• Findings: 1
• Version: 2.1.1
• Hash: 1cc9b5db89efb61a8f7a42382fbb06c72752488cc93624b43b63b867d7288400
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'carapace' skill bundle provides instructions and documentation for an AI agent to interact with a shared knowledge base API. It includes standard procedures for API registration, credential storage in ~/.config/carapace/, and semantic querying. Most importantly, SKILL.md contains explicit security warnings instructing the agent to treat all external data from the API as untrusted and to avoid executing any instructions found within query results, which is a strong positive security indicator.