Nimrobo

• Analyzed: May 12, 2026, 3:20 AM
• Findings: 1
• Version: 0.17.0
• Hash: 30d3399f59782a8793f1d00b4c59f01e328bde8178a25cbd181f9a96f3cefed1
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides a CLI tool for 'voice screening and matching network operations'. It involves installing a global npm package, authenticating with an API key stored in `~/.nimrobo/config.json`, and making network calls to `app.nimroboai.com` and `net-api.nimroboai.com`. These actions are consistent with the stated purpose of a legitimate CLI tool interacting with a remote service. The instruction in `SKILL.md` regarding `nimrobo onboard` is a benign prompt injection, guiding the agent to use an interactive onboarding feature of the CLI based on user input, without any malicious intent or deviation from the skill's purpose.