Ask Lenny

• Analyzed: May 11, 2026, 7:44 AM
• Findings: 1
• Version: 1.0.4
• Hash: 089b52b413cd09efb4657d06ecfce120b48c6d7cc7011bee604772e8ea861f6d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'ask-lenny' skill is a legitimate search and retrieval tool designed to query Lenny Rachitsky's podcast and newsletter archive. It uses a local TF-IDF index built from data fetched from a public GitHub repository (LennysNewsletter/lennys-newsletterpodcastdata). The implementation consists of standard Python and Bash scripts (setup.sh, build_index.py, search.py) that perform file indexing and searching without any high-risk behaviors like data exfiltration, unauthorized network calls, or obfuscation. The instructions in SKILL.md are well-defined and include safety prompts for the user before running setup tasks.