卷王.skill

• Analyzed: May 2, 2026, 2:31 PM
• Findings: 1
• Version: 1.1.0
• Hash: 502030fd81d5571da10915388f9316537da1ff3568e1b7252ced8483c0b34f0f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'juanwang' skill bundle implements a highly proactive 'overachiever' persona that encourages the AI agent to perform high-risk autonomous actions. Key indicators include instructions to 'Act before asking' (bypassing user consent for file modifications), scanning the user's working directory for information gathering, and establishing persistence via cron jobs for background tasks (found in SKILL.md and SOUL.md). While these behaviors are presented as features of a 'hardworking' colleague, they grant the agent excessive autonomy and significantly increase the risk of unintended system changes or unauthorized data access, though no explicit exfiltration endpoints were identified.