Quiver Quantitative

• Analyzed: May 12, 2026, 3:09 AM
• Findings: 1
• Version: 1.0.1
• Hash: e59b183256c183e9d9f047468b38bb434b3b83a14e7413202116cf5f7d679aeb
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. The `SKILL.md` provides clear instructions for using the skill without any prompt injection attempts. The `scripts/query_quiver.py` script legitimately reads the `QUIVER_API_KEY` environment variable to authenticate with the Quiver Quantitative API and queries data as described. There is no evidence of data exfiltration beyond the intended API calls, malicious execution, persistence mechanisms, or obfuscation.