Skylv Auto Repair Agent

• Analyzed: May 10, 2026, 6:42 AM
• Findings: 1
• Version: 1.0.0
• Hash: da1f394725c85c97a7a733ef19f4975883560b84605328988600ed125d3d55fe
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides a self-healing engine that uses `execSync` in `self_healing_engine.js` to execute arbitrary shell commands via the `watch` command. While this aligns with the stated purpose of monitoring agent workflows, the use of `execSync` on unsanitized input is a high-risk behavior. Furthermore, the `learn` command allows users (or potentially malicious processes) to inject arbitrary strings into a local pattern database (`.self-heal-patterns.json`), which could lead to command injection if an AI agent is prompted to automatically execute the suggested 'fixes'. No clear evidence of intentional malice or data exfiltration was identified.