Surprise Buddy

• Analyzed: May 16, 2026, 12:26 PM
• Findings: 1
• Version: 1.0.0
• Hash: 1110f6305c0307c69cd4e0022a6842db2ab7d5d4165639d01bc635f17f3b87a4
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'surprise-buddy' skill is a legitimate tool designed to query a curated gift database via an MCP server at https://www.surprise-buddy.com/api/mcp. The tools defined in SKILL.md and README.md (such as find_gifts and list_supported_countries) are well-documented and align perfectly with the stated purpose of providing country-scoped gift recommendations. There is no evidence of data exfiltration, malicious code execution, or harmful prompt injection.