Kleinanzeigen.de Helper

• Analyzed: May 1, 2026, 10:40 PM
• Findings: 1
• Version: 1.0.0
• Hash: 43709bc4624a3c18ca92b3ba4d0463d141e2452e3bbb208c22026315a1b1cb9d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill facilitates selling items on kleinanzeigen.de but requires the user to provide their plaintext email, password, and SMS MFA code directly to the agent for browser automation (SKILL.md). While the workflow includes a safety measure by saving listings as drafts rather than publishing them, the handling of sensitive credentials and MFA bypass tokens represents a high-risk pattern that could be exploited for credential harvesting, despite no explicit evidence of data exfiltration to a third party.