ReefBeat

• Analyzed: May 14, 2026, 6:32 AM
• Findings: 1
• Version: 1.0.3
• Hash: 626e294996e44c587b75e10f21a8bdffac2fe464a7cf2e27ed41b1ed0f6468e5
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides a CLI for local control of Red Sea ReefBeat aquarium hardware. The script `scripts/reefbeat.py` implements a network discovery feature that performs multi-threaded HTTP probing across the local subnet, which is a risky capability. Additionally, the script allows for arbitrary HTTP requests (GET/POST/PUT/DELETE) to be sent to any endpoint on a target IP, creating a potential for SSRF or unauthorized device manipulation if the agent is misdirected. While these functions are aligned with the stated purpose of device management, they constitute high-risk network behaviors according to the analysis criteria.