Agent Reach

• Analyzed: May 11, 2026, 4:43 AM
• Findings: 1
• Version: 1.1.0
• Hash: 848267b16b2a11771a5a0dfae94b8ae48f5732c5e12a9d8d7005f212ce0dcb90
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides extensive capabilities for web scraping and social media interaction, but it includes high-risk instructions for the agent to fetch and execute a remote installation guide from GitHub (raw.githubusercontent.com/Panniantong/agent-reach/main/docs/install.md), which poses a significant Remote Code Execution (RCE) risk. It also requires the agent to manage sensitive session cookies and interact with numerous third-party tools and APIs (e.g., mcporter, xreach, jina.ai). While these actions support the stated goal of cross-platform data retrieval, the combination of remote script execution and broad network access is highly risky.