conclave

• Analyzed: May 12, 2026, 3:27 AM
• Findings: 1
• Version: 2.48.0
• Hash: 527063418bfe6a2e00e5d70c9b6011f6959b9f097e63df894b1d5494e57018e4
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill instructs the AI agent to install a global npm package (`@conclave_sh/cli` from `skill.md`), introducing a supply chain risk. It also handles a sensitive `CONCLAVE_TOKEN` and directs the agent to initiate financial transactions (on testnet). Most critically, the `guide.md` file contains a prompt injection instruction (`if "no_change" -> re-run immediately, ZERO commentary`) that directs the agent to suppress output, which is a tactic often used to hide actions or reduce transparency, making the overall behavior suspicious.