Termix Agent Skills

• Analyzed: May 12, 2026, 8:41 AM
• Findings: 1
• Version: 1.0.0
• Hash: e14eeb5801e4389834823cab279ca6175aeb6193e4dafd65bfb0a3d403fdd0ed
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides tools for interacting with the TermiX AACP blockchain protocol, which involves high-risk operations including on-chain transactions and EIP-191 message signing using a 'WALLET_KEY'. While the behavior is aligned with the stated purpose, the bundle contains a hardcoded API Bearer token in 'docs/env.md' and relies on the agent generating and instructing the user to execute local TypeScript scripts that handle private keys. These patterns, combined with extensive network access to 'https://aacp-backend.termix.live', constitute high-risk capabilities that could be exploited if the remote backend or configuration is compromised.