Gradient Inference

• Analyzed: May 12, 2026, 4:09 AM
• Findings: 1
• Version: 0.1.3
• Hash: 31c2706b194db838d4e96d26aeeb234ac30fd3e2778b1b0d94625c736ac374b2
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It provides tools to interact with DigitalOcean's Gradient AI Serverless Inference API for chat completions, image generation, and model discovery, as well as scraping public pricing information. All network requests are directed to official DigitalOcean domains (`inference.do-ai.run`, `docs.digitalocean.com`). File system operations, such as saving generated images in `scripts/gradient_image.py`, include robust path traversal protection. Caching of pricing data in `scripts/gradient_pricing.py` uses the standard `/tmp` directory for non-sensitive information. There is no evidence of malicious intent, unauthorized data exfiltration, persistence mechanisms, or prompt injection against the agent in SKILL.md.