Vibesku

• Analyzed: May 11, 2026, 5:57 AM
• Findings: 1
• Version: 0.2.4
• Hash: 089f7d7c4da0714ca1f67b841ff321bb975bbaa3925f19ba3f153b7c898703a1
• Source: palm
• External report: View on VirusTotal

Findings (1)

The bundle is a functional CLI for the VibeSKU AI platform, allowing users to generate and manage e-commerce visuals. It includes standard features for an API client, such as device-flow authentication, configuration management in ~/.vibesku (with appropriate file permissions), and file upload/download capabilities. While the code uses a minor obfuscation technique to call child_process.spawn (bin/vibesku.js) and the SKILL.md contains instructions for the AI agent to manage its own updates via a specific GitHub repository, these behaviors are consistent with the stated purpose of providing an integrated AI agent tool. No evidence of malicious intent, credential theft, or unauthorized data exfiltration was detected.