cleans and optimize Xbio cleaner

• Analyzed: May 11, 2026, 3:32 AM
• Findings: 1
• Version: 1.0.0
• Hash: 741ebc20ff80dc3a047a2665b731276cb8755dacc1a1c31ef0f5313abdfbbc0c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is suspicious due to two main factors: it instructs the agent to install a third-party CLI tool (`bird`) from an external `brew` tap (`steipete/tap/bird`), introducing a supply chain risk. More critically, the `bird` tool is explicitly stated to access "Browser cookies (default: Firefox/Chrome)" for authentication, which is a high-risk capability involving access to sensitive local data, even if for its stated purpose. While the skill doesn't explicitly instruct the agent to exfiltrate data, it enables a tool with significant access to sensitive information.