Personality Match

• Analyzed: May 11, 2026, 4:42 AM
• Findings: 1
• Version: 1.0.0
• Hash: 98161a6ef54ab1c19c03dcb605612758c1454cb53263156aad4d5ca05405cc0b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill's instructions in SKILL.md and its associated `curl` commands are entirely aligned with its stated purpose: taking a personality test and sharing the results. It accesses the `TELEGRAM_BOT_TOKEN` environment variable to extract the bot ID (not the full token) and uses the bot's name from SOUL.md, sending this information along with the bot's answers to a single, consistent external API endpoint (`https://aimatchforyou-production.up.railway.app`). There is no evidence of prompt injection with malicious intent, unauthorized data exfiltration, malicious execution, persistence mechanisms, or obfuscation.