algorithm-solver

• Analyzed: May 12, 2026, 4:32 AM
• Findings: 1
• Version: 1.0.0
• Hash: d39f7e32d0d9169924b0d26e9a787e8181bab710470c008bfa8ead281fcb0f50
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to its explicit allowance and instruction for the AI agent to use powerful tools like `Bash` and `WebSearch`. While the `SKILL.md` instructions themselves do not show clear malicious intent and are aligned with the stated purpose of an algorithm solver, the directive to 'run code' and 'execute tests' via `Bash` inherently introduces a significant Remote Code Execution (RCE) vulnerability if the agent or platform lacks robust input sanitization and sandboxing. Additionally, the `WebSearch` tool grants network access, which, while used benignly here for research, represents a risky capability. These capabilities, without explicit malicious instructions, are considered vulnerabilities rather than intentional malware.