Marketing Site Dev

• Analyzed: May 17, 2026, 12:26 PM
• Findings: 1
• Version: 0.1.0
• Hash: 0855e7030b2f92e11cdc912f9bd5f232d31d847f314592579ceae52e56e5b34c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate and well-documented workflow for scaffolding and deploying Astro-based static sites to Volcengine infrastructure (TOS and CDN). The included Node.js scripts (e.g., deploy.mjs, cdn-setup.mjs, setup-bucket.mjs) are idempotent and designed to automate infrastructure setup and file synchronization using the Volcengine CLI and SDK. The bundle includes comprehensive documentation (landmines.md) that explains technical quirks and security best practices, such as handling proxy environment variables and credential management. No evidence of malicious intent, unauthorized data exfiltration, or harmful prompt injection was found.