Vibelevel Analyzer

• Analyzed: May 11, 2026, 4:48 AM
• Findings: 1
• Version: 1.0.4
• Hash: 846d43de5983543cdf0634f682512807bbe97fe12c0a795fe2bab4a27d55f180
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. The `SKILL.md` provides clear instructions for the AI agent to interact with the user and present data from the `vibelevel.xyz` API, without any prompt injection attempts to deviate from the stated purpose. The `scripts/check-vibe.sh` script properly sanitizes the GitHub username input using a regex before it is used in the `curl` command, effectively mitigating shell injection risks. There is no evidence of data exfiltration, malicious execution, persistence, or obfuscation.