Skill Updater

• Analyzed: Apr 1, 2026, 8:31 AM
• Findings: 1
• Version: 1.0.1
• Hash: 074f8e2704e4a0ce6d57e7e1d0c810bc652e478987a0ebbcc9ce72ded5113431
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate utility designed to manage and update AI agent skills across multiple platforms (e.g., Claude, Cursor, OpenClaw). The Python script (scripts/skill_updater.py) implements standard Git operations and lockfile management to synchronize local directories with remote repositories, including safety checks for uncommitted changes and a backup mechanism (tar.gz) before updates. No evidence of data exfiltration, malicious prompt injection, or unauthorized persistence was found; the broad file system access is strictly aligned with the tool's stated purpose of maintaining skill directories.