Fabric.co API skill

• Analyzed: May 14, 2026, 3:02 AM
• Findings: 1
• Version: 1.0.1
• Hash: 2246b410f5e3a7ca240b4d05fe4f3fcb5b6aa692f08a646d5c767bb1b3020b5b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. All files, including the `SKILL.md` instructions, helper scripts (`fabric.mjs`, `fabric.py`), and API specification (`fabric-api.yaml`), align with the stated purpose of interacting with the Fabric HTTP API. The helper scripts are standard HTTP clients that read the API key from the `FABRIC_API_KEY` environment variable and include a security measure to prevent accidental API key leakage to arbitrary absolute URLs. There is no evidence of prompt injection, data exfiltration, malicious execution, persistence mechanisms, or obfuscation.