Remote Skill Test

• Analyzed: May 10, 2026, 12:41 PM
• Findings: 1
• Version: 1.0.0
• Hash: ac97f52688c314f4f9b4758cf461e4788895e8651174abdf8f93039a2048c405
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill facilitates remote command execution and file retrieval via SSH/SCP, which is inherently high-risk. It contains multiple shell injection vulnerabilities in SKILL.md where user-provided variables (e.g., {SKILL_NAME}, {USER}, {HOST}) are interpolated directly into shell commands without sanitization. Furthermore, it explicitly bypasses security prompts using the '--dangerously-skip-permissions' flag and includes prompt-injection-style instructions to the remote agent to 'operate directly without confirmation.' While these behaviors are aligned with the stated purpose of automated remote testing, the combination of shell injection risks and intentional security bypasses warrants a suspicious classification.