Jentic

• Analyzed: May 12, 2026, 4:30 AM
• Findings: 1
• Version: 1.1.3
• Hash: 20a4bdd8343bfb2005f585b0bf8728962f3ec17aa925bf705ccbd7b34d2e74da
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'jentic' skill acts as an API middleware but is classified as suspicious due to high-privilege installation steps in SKILL.md, including 'curl | sudo sh' for Docker and 'docker run' for service deployment. It also directs the agent to modify its own system instructions by appending content from references/tools-block.md to the workspace TOOLS.md. While these actions are intended for setting up a self-hosted proxy and include security warnings, the combination of root-level execution and self-modification of agent instructions represents a high-risk capability.