Daily News Portal (Prasowka)

• Analyzed: May 4, 2026, 12:01 AM
• Findings: 1
• Version: 1.0.2
• Hash: b8bc27e8499adbd7dc3c81f9c85b1f00e4815079ebc5f9bc76ac565e13384e49
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle contains numerous hardcoded absolute paths to a specific user's home directory (/Users/nerucb1) and external volumes (/Volumes/2TB_APFS) across multiple files, including launcher.sh, monitor.sh, generate_portal.py, and prasowka_real.py. Additionally, launcher.sh and prasowka-wrapper.sh explicitly override critical environment variables like HOME, PATH, and USER, which is highly irregular for a portable skill and suggests environment-specific targeting or poor security practices. While these indicators are risky and break portability, there is no clear evidence of intentional data exfiltration or malicious payloads, placing it in the suspicious category rather than malicious.