Content Ideas Generator

• Analyzed: May 12, 2026, 3:06 AM
• Findings: 1
• Version: 1.0.0
• Hash: 0a2ed883144d03a948964757cdb0ce45a6a4287a201c91d8bee842d71389fb82
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as suspicious due to the instruction in `SKILL.md` to use `web_fetch` for user-provided URLs. This grants the AI agent network access to arbitrary external endpoints, which is a risky capability that could be exploited for SSRF or other network-based attacks if a malicious user provides a crafted URL. Additionally, the skill instructs the agent to write files to the local filesystem (`content-ideas/ideas-{timestamp}.md`), which, while for a stated purpose, is another high-risk capability. There is no clear evidence of intentional malicious behavior instructed by the skill itself, such as data exfiltration or persistence.