Video Production

• Analyzed: May 11, 2026, 4:42 AM
• Findings: 1
• Version: 1.0.0
• Hash: 82736118ff081c9356eef91da842d3a0d8b5b42944cfae6ae0ad551c4a8736f3
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to explicit instructions in `SKILL.md` for the AI agent to establish persistence via a `crontab` entry, and the `scripts/quota_watcher.sh` script, executed by this cron job, performs external communication by sending an iMessage to a hardcoded phone number ([phone]). This script also sources `~/.zshenv` to access API keys. While the stated purpose is operational (retrying API calls and notifying a 'Master'), the use of system-level persistence and unauthorized external communication channels constitutes high-risk behavior and a form of prompt injection against the agent.