Hormuzmonitorskills

• Analyzed: Mar 31, 2026, 4:26 AM
• Findings: 1
• Version: 1.3.0
• Hash: 04f7e349bc004b48be47a1b11d9bd5462b367be151b28b956fb6d2a2441745a5
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill monitors maritime traffic in the Strait of Hormuz and executes a local shell script (`~/hormuz-website/scripts/update_and_deploy.sh`) to update a website. While this behavior aligns with the stated purpose, the execution of an external script not included in the bundle and the broad web-fetching capabilities (including Iranian state media like Tasnim and Fars) represent a significant security risk. No clear evidence of intentional data exfiltration or malicious intent was found, but the shell execution capability is a high-risk feature.