Email Design

• Analyzed: May 12, 2026, 3:41 AM
• Findings: 1
• Version: 0.1.5
• Hash: f2fd1c009a42a3b605b98692bf8336a9ca3ca831ebc929aeb5c69ddcba2baa7d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The `SKILL.md` file contains a `curl -fsSL https://cli.inference.sh | sh` command to install a CLI tool. This method is a supply chain vulnerability, as it executes arbitrary code downloaded from a remote server without prior inspection. While the stated intent is benign (installing a legitimate tool), this pattern introduces a significant risk of remote code execution if the remote script or server is compromised, classifying it as a high-risk capability without clear malicious intent within this specific skill bundle.