Security-Shield

• Analyzed: May 15, 2026, 7:52 AM
• Findings: 1
• Version: 1.1.0
• Hash: 4748491b6650abeba15a9f0ec27905616c1da0fea83725ef1195427c58f91cee
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle defines a security-focused system prompt but includes 'Workflow Compatibility' features in SKILL.md and README.md that act as documented bypasses (e.g., using 'TESTING:' or 'EDUCATIONAL:' prefixes) to lower the agent's security restrictions. Furthermore, references/audit-checklist.md contains a collection of high-risk pentesting commands and exploitation patterns (e.g., nmap, sqlmap, and path traversal strings). While these are presented for auditing purposes, they provide a functional toolkit and a standardized bypass mechanism that could be exploited via prompt injection to perform unauthorized actions or extract sensitive information.