Theme Factory

• Analyzed: May 12, 2026, 3:45 AM
• Findings: 1
• Version: 1.0.0
• Hash: 4a474c25ff397954224b4a72292755462da22279c55450ad506d219dce8d1f8d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. The `SKILL.md` instructs the AI agent to read theme files from its local `themes/` directory, which is a necessary and constrained file access for its stated purpose of applying visual themes. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. The `README.md` includes an `npx add` command for installation from GitHub, which is a common distribution method and not inherently malicious within the context of this skill's content.