Brevo

• Analyzed: May 12, 2026, 3:09 AM
• Findings: 1
• Version: 1.0.0
• Hash: 9bb8ed646041b6ea8eaad5e4776ab49f40739466210cda9076fdfb742e3d084c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign, providing instructions and examples for interacting with the legitimate Brevo (Sendinblue) email marketing API. It instructs the agent to retrieve the `BREVO_KEY` from `~/.config/brevo/api_key`, which is a standard and necessary practice for API authentication. All network requests are directed to the official `https://api.brevo.com/v3` domain, and there is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the agent in SKILL.md.