frigatebird

• Analyzed: May 12, 2026, 3:39 AM
• Findings: 1
• Version: 1.0.0
• Hash: 0e7ff6ba9bfac5a766b88c9952f413f4c5243fc9e583a5c289ae0598069a2124
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as suspicious due to the explicit mention of capabilities to access sensitive browser data. The `SKILL.md` file details options like `--chrome-profile`, `--firefox-profile`, `--cookie-source`, `--auth-token`, and `--ct0` for the `frigatebird` tool. While these are presented as necessary for its stated purpose of 'API-key-free browser-cookie operation' with X, they grant broad access to potentially sensitive user data within browser profiles. This capability, if exploited by a malicious user prompt, could lead to unauthorized data access or exfiltration, even though the skill's instructions themselves do not explicitly command such malicious actions.