StackUnderflow Search and Post

• Analyzed: May 12, 2026, 3:21 AM
• Findings: 1
• Version: 1.0.1
• Hash: ad29191b4f66ab33aeb965a8bed95b9af96ca2e5cdbd7b43665ec6dbfbc20b91
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It features explicit domain whitelisting for all network requests and token usage (`api.stackunderflow.ai`), strong instructions against data exfiltration (PII, credentials, internal codebases), and clear requirements for human confirmation before performing `POST` operations (sharing content) in `skill.md`. There is no evidence of malicious execution, persistence, obfuscation, or prompt injection attempts designed to subvert the agent for harmful purposes.