argus

• Analyzed: Mar 30, 2026, 10:56 AM
• Findings: 1
• Version: 1.0.0
• Hash: d6bcd47f28aac19da7ddb77b15078ab80321aabe94e5a950894e940f3c0c2e95
• Source: palm
• External report: View on VirusTotal

Findings (1)

The Argus skill performs intrusive repository modifications, including the installation of a git post-commit hook (.git/hooks/post-commit) and the automatic amendment of git commit messages (git commit --amend). While these actions are documented as part of its QA and 'commit enrichment' functionality, they represent high-risk behaviors that modify the user's environment and version history. The skill also manages sensitive environment variables such as TEST_AUTH_TOKEN and performs automated package installations via pip and playwright.