Dual Stream Architecture

• Analyzed: May 12, 2026, 3:45 AM
• Findings: 1
• Version: 1.0.0
• Hash: cd0b3d9145db9553eb5656a92e026e2948ed4c901d4c2c91a45cfe3e0d15f818
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle describes a dual-stream event publishing architecture using Kafka and Redis. The `SKILL.md` and `README.md` files provide documentation, code examples, and installation instructions. There is no evidence of prompt injection against the AI agent, nor any malicious code attempting data exfiltration, unauthorized execution, or persistence. The Go code snippets are illustrative and do not contain risky operations. Installation methods include `npx clawhub@latest install` and direct `cp -r` commands, which are standard for skill integration. While `npx add` from a GitHub URL is mentioned, it's not inherently malicious and likely a legitimate installation path within this ecosystem.