AgentRank

• Analyzed: May 11, 2026, 6:51 AM
• Findings: 1
• Version: 1.3.0
• Hash: ab735ac7a6ff4db97c86fb415f5c67cdd4bf4c3260f1dd46a5a868cdbecc6a26
• Source: palm
• External report: View on VirusTotal

Findings (1)

The AgentRank skill is designed to provide real-time recommendations for MCP servers and AI tools by querying an external API (agentrank-ai.com). The instructions in SKILL.md direct the agent to use the WebFetch tool to perform searches when users look for tools, encounter capability gaps, or install new skills. While the 'install trigger' causes the agent to send the names of tools the user is installing to the third-party API, this behavior is consistent with the stated purpose of a recommendation engine and lacks indicators of malicious intent, such as data exfiltration of sensitive credentials or unauthorized command execution.