SOLO.ro cli

• Analyzed: May 13, 2026, 3:01 AM
• Findings: 1
• Version: 1.1.0
• Hash: b837b5ec8b1ad6a49f27aa334d2c564e8d0a7ab6f9c9efaab55aa91bc61545ea
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill instructs the agent to install `solo-cli` from a third-party Homebrew tap (`rursache/tap`) via `brew install rursache/tap/solo-cli` in `SKILL.md`. This introduces a significant supply chain risk, as the integrity and behavior of the `solo-cli` binary from this untrusted source cannot be guaranteed. While the skill's instructions themselves do not explicitly command malicious actions, the act of installing software from an arbitrary third-party tap is a high-risk operation. Additionally, the tool handles sensitive user credentials and session cookies locally, which, combined with the supply chain risk, makes the overall behavior suspicious.