Smart Follow-ups

• Analyzed: May 12, 2026, 3:02 AM
• Findings: 1
• Version: 2.1.8
• Hash: a368804bed5b3b21d5af994aa440eef2a61037732bc7479bd00a548d4116eca7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The smart-followups skill bundle is a well-documented tool designed to generate contextual follow-up questions for AI conversations across multiple messaging platforms. The core logic in handler.js and cli/followups-cli.js uses standard LLM integration patterns (Anthropic/OpenRouter) and includes defensive prompt engineering to treat conversation history as opaque data, mitigating potential prompt injection from users. No evidence of data exfiltration, malicious execution, or unauthorized persistence was found; the behavior is entirely consistent with the stated purpose.