한국 자동차/보험 가이드

• Analyzed: May 12, 2026, 4:34 AM
• Findings: 1
• Version: 1.0.0
• Hash: f72a7ad286a29cc820bab69a6f9fe18949ae64977653d133fe51398e68f3f28d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to the explicit instruction to execute `bash` commands within the `playbook.md` file. Specifically, `bash skills/law-search/scripts/law_search.sh` is called. While the arguments passed are hardcoded and appear benign (calling an internal `law-search` skill with specific legal terms), the direct execution of `bash` commands represents a high-risk capability. This primitive could be exploited for remote code execution if the arguments were user-controlled or if the `law_search.sh` script itself were vulnerable, even though there is no clear evidence of intentional malicious behavior (e.g., data exfiltration, persistence, or downloading remote payloads) in the provided files.