moyu-journal-auto

• Analyzed: May 11, 2026, 7:19 AM
• Findings: 1
• Version: 1.0.0
• Hash: eaaf262fdb3162286061f8d6764e64fae524fdf34dc6c932ad0e36fd173ad798
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill requests high-risk permissions, including local filesystem access and the ability to scan sensitive user data such as browser history and calendar events to track 'slacking' activities. While the stated intent is a humorous productivity tool, the broad access to personal history and instructions to generate deceptive 'disguised' work logs (SKILL.md) pose a significant privacy risk. No explicit data exfiltration logic was found, but the scope of data access is excessive for the described purpose.