Flexible Data Importer

• Analyzed: May 12, 2026, 3:26 AM
• Findings: 1
• Version: 1.0.0
• Hash: 3cd4da24872cf4d3a4a8bac5f77de650ac97b46ba0618e6fd85beeb39f9e27ed
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to its inherent high-risk capabilities, specifically requiring `network: true` and `filesystem: true` permissions, and explicitly handling sensitive credentials like `SUPABASE_KEY` and `OPENAI_API_KEY` as outlined in `SKILL.md` and `README.md`. While these capabilities are necessary for its stated purpose of AI-driven data ingestion into Supabase, the handling of API keys and network access always presents a potential attack surface. There is no clear evidence of intentional malicious behavior, prompt injection attempts, or unauthorized data exfiltration beyond the stated purpose.