Canvas Poster

• Analyzed: May 5, 2026, 1:21 PM
• Findings: 1
• Version: 1.0.0
• Hash: 55089a2e78083a88c12226263a1e45796611e8455a787611c3474ad1a2a27424
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate server-side poster and dashboard generation engine based on the @napi-rs/canvas library. The code in lib/builder.js and lib/core.js implements a declarative DSL for rendering charts, tables, and KPI cards into PNG images without any evidence of malicious intent, data exfiltration, or unauthorized network activity. File system operations are restricted to reading configuration data and writing the final image output as expected for this type of utility.