Threads Analytics

• Analyzed: Mar 27, 2026, 3:01 PM
• Findings: 1
• Version: 1.0.1
• Hash: a2e918d78d9d7bc8aeb02e826237bf51767f7519be11d63712c1b73dfd0a8ff7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The threads-analytics skill is a configuration and instruction set for an AI agent to interface with the 'Boring' third-party service (boring.aiagent-me.com) to retrieve Threads social media metrics. While it requires a sensitive MCP URL containing an embedded authentication token, the documentation (SKILL.md) explicitly warns the user to treat this as a credential and claims the token's scope is read-only. No malicious code, data exfiltration logic, or prompt injection attempts were identified; the tools and workflows are strictly aligned with the stated purpose of performance tracking.