Skylight

• Analyzed: May 12, 2026, 3:07 AM
• Findings: 1
• Version: 1.0.0
• Hash: dbdd14f1ac023db60a395f36e90d82b59d97c821eae3f6d4ce90eef50acd865b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to interact with the unofficial Skylight Calendar API. It requires environment variables like `SKYLIGHT_EMAIL`, `SKYLIGHT_PASSWORD`, and `SKYLIGHT_FRAME_ID` to authenticate and make API calls to `https://app.ourskylight.com`. The `SKILL.md` file details the authentication process, which involves sending credentials to the legitimate Skylight API endpoint via `curl` to obtain an authorization token. All network requests are directed to the stated `ourskylight.com` domain. There is no evidence of data exfiltration to unauthorized third parties, malicious code execution, persistence mechanisms, or prompt injection attempts to subvert the agent's instructions. The use of `curl` and `jq` is standard for API interaction and aligns with the skill's stated purpose.