Edithai

• Analyzed: May 11, 2026, 5:55 AM
• Findings: 1
• Version: 1.0.1
• Hash: f244e4c8d27297028fb763124906130fe8812c4420e366fe91380f65e17492a2
• Source: palm
• External report: View on VirusTotal

Findings (1)

The EdithAI skill installs a global NPM package (@xin9min9/edithai-cli) and grants an AI agent broad system permissions, including file read/write access, process monitoring, and network analysis. While its stated purpose is log analysis via the DeepSeek API, the tool provides high-risk capabilities that could be used for data discovery and exfiltration. The documentation (SKILL.md, CAPABILITIES.md) describes a wide array of diagnostic tools and terminal execution features that, while including some whitelisting mitigations, represent a significant attack surface without a verified source repository (currently using a placeholder GitHub URL).