skill-1

• Analyzed: Apr 24, 2026, 8:21 AM
• Findings: 1
• Version: 1.0.5
• Hash: dcbaef9c7479286c6acab15c45f8ae8f0e8d638d9c2207ff9308f762cf8e5cc3
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides legitimate management functionality for a 1Panel server instance, allowing an AI agent to search, install, and uninstall applications via the 1Panel API. The implementation in dist/client.js correctly follows the 1Panel authentication protocol (MD5 hashing of the API key and timestamp), and all network requests are directed to the user-configured baseUrl. No evidence of data exfiltration, unauthorized execution, or malicious prompt injection was found.