Product Share Trigger Reviewer

• Analyzed: May 15, 2026, 8:51 AM
• Findings: 1
• Version: 1.0.0
• Hash: 45c23a0e627aff0df0ce1a47d214fe5998ef7940e4854b57133f05f203f3d784
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle defines a product review workflow in SKILL.md that requires the agent to execute a local Python script (scripts/check_product_share_gate.py) and modify repository files such as package.json and documentation. While these actions are aligned with the stated purpose of automating product-readiness checks, the instructions grant the agent high-risk capabilities including shell execution and file system writes. The bundle lacks the source code for the referenced script, making its actual behavior unverifiable, although the instructions do include explicit guardrails against handling sensitive data or credentials.