XCrawl Crawl

• Analyzed: May 11, 2026, 6:10 AM
• Findings: 1
• Version: 1.0.2
• Hash: 5c7fe340d5b1a0cd4d4984452e63e4cca7fc797443337e1e2fc4f066593c13ec
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to orchestrate web crawling tasks using the XCrawl API (run.xcrawl.com). It uses standard tools like curl and node to interact with the API and requires a local configuration file (~/.xcrawl/config.json) to store the API key, which is a common and legitimate pattern for such integrations. No evidence of data exfiltration, unauthorized execution, or malicious prompt injection was found in SKILL.md or the associated metadata.