Skylv Context Aware Scheduler

• Analyzed: May 10, 2026, 6:34 AM
• Findings: 1
• Version: 1.0.1
• Hash: 4a7aaa211727f6276adbbfcb188d03267555dbbfdc872801d8f95322b7a1fe20
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill implements a task scheduler that executes arbitrary shell commands via 'child_process.execSync' based on configurations in a JSON file (scheduler.js). While this behavior is consistent with the stated purpose of a scheduler, the use of unsanitized shell execution represents a significant security risk (RCE) if the task file is influenced by untrusted input. No evidence of intentional malice, data exfiltration, or hardcoded backdoors was found in the code or the SKILL.md instructions.