TARDIS

• Analyzed: May 12, 2026, 3:25 AM
• Findings: 1
• Version: 1.2.0
• Hash: c06e283db19291d0c539b376616219acbd1b01e677f4944c74b8142746065471
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to the explicit 'ACTION: Triggers' feature documented in SKILL.md and README.md, which allows milestone messages from the plaintext `meters.json` file to be executed as agent instructions, creating a direct prompt injection vector if local file access is compromised. Additionally, the `scripts/check-webhook-services.sh` script actively starts a `cloudflared tunnel` to expose a local service to the public internet, a high-risk capability, and both Python scripts read environment variables from potentially sensitive locations like `/root/.env` and `~/.env`.