Noisepan Digest

• Analyzed: May 11, 2026, 4:49 AM
• Findings: 1
• Version: 1.0.5
• Hash: 66b48336b8d03cad03b3dded3b72b0e0d126a63e961b245d46cbcfa9fad1d680
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle implements automated news digests but employs several high-risk behaviors, including downloading and installing external binaries from GitHub (ppiankov/noisepan and ppiankov/entropia) and creating shell scripts in SKILL.md that launch a local HTTP server (python3 -m http.server 18222) to bypass rate limits. While these actions are aligned with the stated purpose, the combination of binary execution, local server hosting, and script-based configuration manipulation (using sed and ln) represents a significant attack surface and potential for unintended side effects.