Hackathon

• Analyzed: May 12, 2026, 3:26 AM
• Findings: 1
• Version: 1.0.6
• Hash: d02e6650a82726efad2881b0385cc83f71522278291bf3e0eab54406baa96af3
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign, demonstrating a strong focus on security and explicit instructions to prevent malicious behavior. While it instructs the agent to read/write `~/.gitpad_password` for credential management, this is a plausible and necessary action for the stated purpose of interacting with GitPad. Crucially, the `SKILL.md` file contains extensive and explicit warnings against prompt injection, running untrusted code, using mainnet, and sending credentials to third-party endpoints, actively guiding the agent towards secure practices rather than exploiting it.