Quack Code Review Hardened

• Analyzed: May 10, 2026, 6:28 AM
• Findings: 1
• Version: 1.0.0
• Hash: f90e1b892d6b72af614aad90d6a205502de0a1b77e6df8c915dcfd91f0062c0e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides AI-powered code analysis by transmitting code to an external API (logic.art). The core logic in `scripts/analyze.mjs` is straightforward and performs no hidden or malicious actions. The bundle is notable for its 'hardened' approach, incorporating extensive defensive instructions in `SKILL.md` and `SAFETY.md` designed to prevent the AI agent from leaking secrets, bypassing user consent, or falling victim to prompt injection. The behavior is transparently documented and strictly aligned with its stated purpose.