Doc Sysadmin

• Analyzed: May 11, 2026, 4:47 AM
• Findings: 1
• Version: 1.0.0
• Hash: 0cf584caf1cd3839fd8dbb41bcb4cc4ae8221af84e443dd4e12d58fd6b19dd30
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed for Ubuntu system administration and maintenance, including cleanup tasks, and is granted `elevated: true` permissions. While the `SKILL.md` instructions emphasize safe cleanup practices (e.g., deleting only temporary files older than 7 days), the `scripts/cleanup.sh` file contains an overly aggressive command `rm -rf /tmp/* /var/tmp/*`. This command deviates from the stated safety guidelines and can lead to system instability or data loss by indiscriminately deleting all contents of `/tmp` and `/var/tmp`, including files actively used by running applications. This constitutes a significant vulnerability, classifying the skill as suspicious rather than benign or malicious.