knowbster

• Analyzed: May 12, 2026, 3:15 AM
• Findings: 1
• Version: 1.0.0
• Hash: b5cdd17ef47e34d1fe5211ba18bb97a1fcaaaa92a355888ce749ca1da7999f35
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to its inherent high-risk capabilities, specifically the direct handling of sensitive credentials like `PRIVATE_KEY` and `PINATA_JWT` from environment variables, and its execution of cryptocurrency transactions on the Base L2 blockchain. While these actions are plausibly needed for the stated purpose of a decentralized knowledge marketplace, they represent significant security risks. All external network calls to `knowbster.com`, `api.pinata.cloud`, `gateway.pinata.cloud`, and `mainnet.base.org` are consistent with the skill's stated functionality, and there is no clear evidence of intentional malicious behavior or deceptive prompt injection in `SKILL.md`.