RMN Visualizer

• Analyzed: May 11, 2026, 4:34 AM
• Findings: 1
• Version: 1.1.2
• Hash: 899b476c20c5dfbceab126b65d053b0f5fc7f8de884c09db46f92251dd2df16e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to its core functionality involving the reading of potentially sensitive agent memory files (MEMORY.md, memory/*.md, .issues/*, SOUL.md) and then exposing this processed data to the public internet via a Cloudflare Tunnel, as orchestrated by `scripts/launch.js` and `scripts/serve.js`. While this aligns with the stated purpose of visualizing agent memory, it creates a significant vulnerability risk if the agent's memory contains confidential information. The `SKILL.md` also contains a functional prompt injection instruction to the agent to output only the public URL, which, while intended for user convenience, is a signal of agent instruction manipulation.