4To1 Planner - AI Planning Coach

• Analyzed: May 14, 2026, 3:46 AM
• Findings: 1
• Version: 2.0.0
• Hash: 4ed29fc2fa241b06f6e8aaa53d8a30f15776bc6bfb955ab786a3bd7c85da6025
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to critical vulnerabilities that could lead to Remote Code Execution (RCE) and shell injection. Specifically, `scripts/setup.sh` uses `read -p` to capture user input (e.g., API keys) and writes it directly to `~/.config/4to1/config` using `echo`, which is vulnerable to shell injection. This is compounded by `scripts/status.sh` which then `source`s this config file, creating an RCE vulnerability where an attacker could inject arbitrary commands into the config file and have them executed. Additionally, `SKILL.md` contains instructions for the AI agent to process user input for backend operations (e.g., 'Quick Add'), which presents a prompt injection risk if the agent does not properly sanitize user-provided content before constructing API calls or local file writes.