Generate Med Spa Studio Client Education Handout

• Analyzed: May 1, 2026, 8:16 PM
• Findings: 1
• Version: 1.0.0
• Hash: 1ed410cf7b8b1dc4d46f00e7a9226e239d1649c3eb988494d48266b590e4c896
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle requests high-privilege 'Bash' and 'Read' tool access in SKILL.md, which is unnecessary for its stated purpose of generating text and images for med spa handouts. This over-provisioning of permissions represents a security risk (broad permissions), although no explicitly malicious logic or prompt injection attempts were identified in the provided files.