Strykr Prism

• Analyzed: May 12, 2026, 3:07 AM
• Findings: 1
• Version: 1.1.2
• Hash: 2e90e4ef9e0a17b999deb002ef8df15163878496bfae2af26364e04e1f36dea6
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. All files consistently define and interact with a financial data API hosted at `https://strykr-prism.up.railway.app`. The `SKILL.md` provides clear instructions for an AI agent to use this API, and the `scripts/prism.sh` helper script exclusively uses `curl` to query this specific endpoint. There is no evidence of data exfiltration, malicious execution (e.g., `curl|bash`), persistence mechanisms, or prompt injection attempts against the agent. The skill properly requests an API key via environment variable (`PRISM_API_KEY`) as a configuration item, which is a standard and secure practice.