Promptify Skill

• Analyzed: May 12, 2026, 3:10 AM
• Findings: 1
• Version: 3.1.0
• Hash: 7f56df1326fd73099510aea9984a5e89b6ed758f122221307d4dca3afaff6be7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as suspicious due to the presence of high-risk capabilities that could be exploited. Specifically, the `SKILL.md` and `commands/promptify.md` files instruct the AI agent to execute direct shell commands (e.g., `echo 'PROMPT' | pbcopy`), demonstrating a capability for arbitrary command execution. Additionally, the `agents/codebase-researcher.md` file instructs the agent to use tools like `Glob`, `LS`, `Grep`, and `Read`, granting broad file system access that could be leveraged to read sensitive files if the agent's behavior were maliciously influenced, despite the stated purpose being benign codebase exploration.