Craft Notes

• Analyzed: May 12, 2026, 3:03 AM
• Findings: 1
• Version: 1.0.0
• Hash: 096641db140f954c031d78261e10d1f579ba3a9b8f190bfe8021ab3fc8816c53
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle describes a legitimate purpose: managing Craft notes via a CLI tool. The `SKILL.md` file provides instructions for installing a local script (`scripts/craft`) and setting up an API URL. No malicious prompt injection attempts, data exfiltration, or other harmful behaviors are present in the provided `_meta.json` or `SKILL.md` files. The `scripts/craft` file itself is not included in the provided content, so its specific actions cannot be analyzed, but the instructions for its use are benign.