QRdex

• Analyzed: May 12, 2026, 3:22 AM
• Findings: 1
• Version: 1.0.0
• Hash: d3f740e7c2d885a72f39a49bbae070a6623ccdc71447a5744fed5b4eb5841ed0
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to interact with the QRdex.io REST API for managing QR codes. All network requests, both in the `SKILL.md` examples and the `scripts/qrdex_api.py` script, are directed solely to `https://qrdex.io/api/v1`. The API key (`QRDEX_API_KEY`) is securely retrieved from environment variables and used only for authentication with the intended service. File operations are limited to saving downloaded QR images, which is a legitimate function of the skill. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the agent.