Composio

• Analyzed: May 12, 2026, 3:41 AM
• Findings: 1
• Version: 1.0.0
• Hash: 729d07747209462d71d0f3e67dda94fcc2b46b46d24c72758b8aefa90005e89f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as suspicious due to the inclusion of highly privileged capabilities, specifically `COMPOSIO_REMOTE_WORKBENCH` and `COMPOSIO_REMOTE_BASH_TOOL` described in `skill.md`. These tools allow for arbitrary Python code execution (including helper functions like `upload_local_file` for potential data exfiltration and `proxy_execute` for direct API calls to connected services) and arbitrary Bash command execution within a persistent sandbox. While these capabilities are presented as legitimate features for advanced automation, they introduce significant risk if the AI agent is compromised via prompt injection, potentially leading to unauthorized data access, exfiltration, or control over connected applications.