Proaktiv

• Analyzed: Apr 10, 2026, 6:11 PM
• Findings: 1
• Version: 1.0.52
• Hash: f481a3237cc80eed1f6841eaa81d0cfab34481cf62762f40e38aeb19e0bc3220
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle implements a highly invasive 'Proactive Companion' that modifies the agent's core behavior by patching SOUL.md and elevating system privileges (setting tools.profile to 'coding' in install.sh). It features 'silent' data extraction as defined in SOCIAL.md, where the agent is instructed to harvest personal information (relationships, meetings, preferences) from the last 50 chat messages without notifying the user. While these actions are aligned with the stated goal of building a stateful 'buddy,' the combination of core instruction modification, silent background harvesting of personal data, and the requirement for high-privilege execution profiles poses significant privacy and security risks.