Supalytics - Web Analytics

• Analyzed: May 12, 2026, 3:20 AM
• Findings: 1
• Version: 1.0.1
• Hash: ab262d574952048acf7ac2a98766f942c576e2ce8e179ea8a8edd42975816a5d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious primarily due to instructions in `SKILL.md` that require the AI agent to execute commands with elevated privileges. Specifically, it instructs the agent to run `sudo ln -sf ~/.bun/bin/bun /usr/local/bin/bun` and `sudo ln -sf ~/.bun/bin/supalytics /usr/local/bin/supalytics`. While the stated purpose is to make the CLI accessible, granting `sudo` access to an AI agent for system-wide path modification is a significant security risk, as it provides broad permissions. Additionally, the installation process involves `curl -fsSL https://bun.sh/install | bash`, which executes a remote script, posing a supply chain risk.