Cache Migration

• Analyzed: May 16, 2026, 8:46 AM
• Findings: 1
• Version: 1.1.0
• Hash: a2dba44070c734836f8bd2c4a2dcae40502014a52df785c0e252f739ba9d6964
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides tools for migrating application caches and data directories using NTFS Junctions on Windows, which requires administrative privileges. Key scripts such as migrate-any.ps1 and migrate-vscode.ps1 perform high-risk operations, including the recursive deletion of user data directories (Remove-Item -Recurse -Force) and the modification of executable startup scripts (e.g., code.cmd) to inject path arguments. While these behaviors are plausibly aligned with the stated purpose of freeing disk space, the combination of high-privilege requirements, potential for data loss if interrupted, and modification of application binaries fits the criteria for a suspicious classification.