teammate.skill

• Analyzed: Mar 31, 2026, 2:16 PM
• Findings: 1
• Version: 2.0.0
• Hash: fc265df52cd466950c45c3c91e577647e3076ce0094a2fa01be0159f07de2295
• Source: palm
• External report: View on VirusTotal

Findings (1)

The teammate-skill bundle is a legitimate tool designed to create AI personas by analyzing professional artifacts such as Slack messages, GitHub PRs, and Notion documents. It features a suite of Python utilities (e.g., slack_collector.py, github_collector.py, and various parsers) that fetch and process data locally within the agent's workspace. Notably, it includes a privacy_guard.py tool specifically designed to scan for and redact PII (emails, API tokens, etc.) before skills are finalized. While the skill includes an 'auto-install' feature that copies generated files into the agent's configuration directory, this behavior is transparently documented and essential to its core functionality of skill generation. No evidence of malicious exfiltration, unauthorized remote control, or obfuscation was found.