mid-autumn-flight

• Analyzed: Apr 24, 2026, 9:56 AM
• Findings: 1
• Version: 3.2.0
• Hash: 160c3a1e28622239dff5429d31ba54c7588fea0e46a320eee71295aef51dbeaa
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill mandates the global installation of an external NPM package (@fly-ai/flyai-cli) if the command is not found (SKILL.md, references/fallbacks.md). This introduces a supply chain risk and requires the agent to execute code with potentially elevated privileges. While the instructions are focused on flight booking, they use aggressive, imperative language to force the agent to bypass its internal knowledge base and rely exclusively on this external CLI, which is a common pattern for controlling agent behavior through prompt injection.