social-card

• Analyzed: May 14, 2026, 6:29 AM
• Findings: 1
• Version: 0.2.1
• Hash: 23a658c1ac1d6fecdd84f083dadd27d40c2afe8ff2bf46b3b6edeb67bd1977bd
• Source: palm
• External report: View on VirusTotal

Findings (1)

The social-card skill is a legitimate utility for generating social media preview images (OG, Twitter, GitHub) using the Pillow library. The documentation in SKILL.md and the example in examples/generate_og.py align with the stated purpose, and the package includes explicit security claims such as path traversal protection and input length limits. No evidence of malicious intent, data exfiltration, or prompt injection was found.