office.xyz

• Analyzed: May 12, 2026, 3:11 AM
• Findings: 1
• Version: 1.0.0
• Hash: 270b45b8919057c9c16902f91b0c809261997ec6812338e424942e4157a3f74c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. All `curl` commands in SKILL.md are directed to the `api.office.xyz` domain, which is the stated purpose of the skill. While the skill includes file upload functionality (`curl -F "file=@./report.pdf"`), this is presented as a legitimate feature for shared office storage and does not instruct the agent to exfiltrate sensitive local files or perform any other intentional harmful behavior. There is no evidence of prompt injection attempts, malicious execution, data exfiltration to unauthorized endpoints, persistence mechanisms, or obfuscation.