Automation Workflow

• Analyzed: May 12, 2026, 4:26 AM
• Findings: 1
• Version: 1.0.0
• Hash: dc946b119805c0a9e09770b43b9bb5b8abf25b1317ee96c420ebbf31826add0b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to its reliance on parsing natural language prompts (`parseRequest(prompt)`) to extract parameters for powerful tools (`browser`, `web_search`). While the `main.js` file currently uses placeholder implementations for these parsing and tool interaction functions, this design pattern inherently introduces a high risk of prompt injection and related vulnerabilities (e.g., URL injection for the browser tool) when fully implemented. There is no evidence of intentional malicious behavior in the provided code or instructions, but the architectural design sets up a significant attack surface.