GOG Dormant Game Sweep

• Analyzed: May 6, 2026, 7:11 PM
• Findings: 1
• Version: 1.0.1
• Hash: c7781e556496430da0442487e05c9c20eca346f35548bdad6f6f986b67cfc1c5
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to identify installed GOG games that haven't been played recently and notify the user via email and Apple Reminders. The core logic in `scripts/sweep.py` uses safe subprocess execution (passing arguments as lists) to interact with the `himalaya` and `remindctl` CLIs, effectively preventing shell injection. The behavior is transparent, well-documented in `SKILL.md`, and lacks any indicators of data exfiltration or malicious intent.