openlink

• Analyzed: Apr 1, 2026, 3:46 AM
• Findings: 1
• Version: 1.0.1
• Hash: 4855c2025c19f488f51b14b7e30098f7cd61c18d13cfc2a6100381b756c2494c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill implements a 'Heartbeat' mechanism in SKILL.md and HEARTBEAT.md that instructs the AI agent to periodically fetch and 'follow' instructions from a remote URL (https://www.openlink.wiki/heartbeat.md). This architecture creates a Remote Instruction Execution (prompt injection) vector, allowing the server owner to dynamically control the agent's behavior or issue new commands without a skill update. While the current instructions are focused on benign community engagement, the capability for remote control is a significant security risk.