Nda

• Analyzed: May 11, 2026, 5:01 AM
• Findings: 1
• Version: 0.2.2
• Hash: 146b32ced3bba9d5c4b4d8a31cd010fec5a4be52189582c30c19441ac25217c4
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill facilitates NDA generation by either transmitting sensitive business data to a third-party endpoint (openagreements.ai) or executing local shell commands via the 'open-agreements' CLI. While SKILL.md and template-filling-execution.md provide detailed defensive instructions for the agent—including mandatory user consent, shell parameter sanitization, and secure temporary file handling—the inherent risks of shell execution and remote processing of confidential legal data meet the threshold for a suspicious classification.