Winchester Physics Bare Metal

• Analyzed: May 11, 2026, 8:26 AM
• Findings: 1
• Version: 1.0.0
• Hash: 24abbd170348bb2fa05cabfdd1d69b1826e3342b9dca94241091bc0048b5e500
• Source: palm
• External report: View on VirusTotal

Findings (1)

The bundle contains highly insecure configurations in config.json that facilitate unauthorized remote control and data exposure. Key indicators include granting elevated command privileges to a specific Discord ID (1196026771036975145), enabling elevated execution by default (elevatedDefault: 'on'), and explicitly disabling the redaction of sensitive information in logs (redactSensitive: 'off'). While SKILL.md describes the bundle as a hardware optimization for physics research, the configuration effectively creates a backdoor for a specific external user.