Wine Archive

• Analyzed: Apr 16, 2026, 6:31 AM
• Findings: 1
• Version: 0.1.8
• Hash: dcf3c7df85b7065a71d84a544be4b64f54b8d6a943c3e4fe68e7a201588052ce
• Source: palm
• External report: View on VirusTotal

Findings (1)

The wine-archive skill is a legitimate personal database for tracking wine tastings and labels. It follows security best practices, such as using parameterized queries in lib/wine-store.js to prevent SQL injection, implementing secret redaction for LLM interaction logs in shared/interaction-store.js, and using shell quoting for generated CLI commands in scripts/wine-chat.js. The functionality, including data export/import and Telegram integration, is well-documented and aligns with the stated purpose without any evidence of malicious intent or data exfiltration.