Ghostfetch

• Analyzed: May 11, 2026, 4:50 AM
• Findings: 1
• Version: 1.1.0
• Hash: 57ef3d0afab851be2dbd94af094f944d416d4a5d214076163dda6f5be2e2ecf3
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate web search and page fetching tool for AI agents. The `SKILL.md` documentation clearly outlines its purpose and usage, includes a 'Security' section detailing its read-only nature and lack of data exfiltration capabilities, and contains no prompt injection attempts. The `setup.sh` script is robust, securely cloning the source code from a pinned GitHub commit, verifying the commit, and building/installing the binary without any malicious actions or vulnerabilities. While the tool offers powerful features like captcha solving, these are presented as legitimate functionalities for web interaction, not as mechanisms for inherent malice.