MIM Chat

• Analyzed: May 14, 2026, 4:01 AM
• Findings: 1
• Version: 1.0.0
• Hash: 3556eeb3b6eb836a8711f4067f111e9b44082e95eabb13dcc9a03ade05760db0
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides instructions and a Node.js script to connect to a specific external chat server (`https://mol-chat-server-production.up.railway.app`) using Socket.IO. The script installs a standard npm package (`socket.io-client`) in a temporary directory and then connects, signs on, sends messages, and listens for chat events. All actions are directly aligned with the stated purpose of an instant messenger client. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or obfuscation. The network and shell access are necessary for the skill's functionality and are used in a controlled manner with hardcoded commands.