Moltext

• Analyzed: May 15, 2026, 3:20 AM
• Findings: 1
• Version: 1.2.3
• Hash: daf26050eb1990febf77332ad73f5005f2ce73c346f0bb03837423e7eb98d592
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to its reliance on a global `npm install` for the `moltext` package, which introduces a supply chain risk by executing arbitrary code from an external source. Additionally, the skill explicitly handles API keys for external services (OpenAI) and connects to local inference servers, representing risky capabilities involving network access and sensitive credential management, even though these are for the stated purpose of compiling documentation.