Privacy Eraser

• Analyzed: May 11, 2026, 5:56 AM
• Findings: 1
• Version: 0.2.0
• Hash: 440c3fe5a5a7021652f50bfaf4042722280f7d177f1f829b1aea69cdb12b973f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'privacy-eraser' skill bundle (v0.2.0) is designed to automate the removal of personal information from various online platforms. While the stated intent is protective, it is classified as suspicious due to high-risk operational patterns: it requires access to sensitive PII in 'USER.md' and utilizes remote browser control ('browser target=node') to execute automated actions within the user's authenticated web sessions on a Mac node. The documentation in 'SKILL.md' explicitly highlights that the AI can perform these actions 'without user awareness' because the browser is already logged in, which presents a significant risk of session abuse or unauthorized actions if the agent's instructions are subverted. It also implements persistence via a 'cron' monitoring task.