Frost Sentinel Lite

• Analyzed: May 11, 2026, 4:37 AM
• Findings: 1
• Version: 1.0.1
• Hash: 2a1bb1a10d82048556475ab643f54674f3259c1ecb625ab56a8012b5fa312497
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill's instructions in SKILL.md and permissions in skill.json are consistent with its stated purpose of lightweight temperature monitoring. Network access is strictly limited to `api.open-meteo.com` for weather data and `localhost` for notifications, as defined in `skill.json`. While `local_read` and `local_write` permissions are present, their use is explicitly confined to a `settings.json` file for configuration, with no instructions to access or modify sensitive system files. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent.