Br Risk Analyzer

• Analyzed: Mar 31, 2026, 9:26 AM
• Findings: 1
• Version: 1.0.0
• Hash: 5719f020019120c571aa917bc2ebc853b5c0c17e6a254680d102bd4c49ea55f8
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to perform automated code reviews and risk analysis, which requires high-risk capabilities such as searching, reading, and writing to the local filesystem as defined in SKILL.md. While its behavior is aligned with the stated purpose, it exhibits several vulnerabilities: it contains hardcoded absolute Windows file paths (e.g., 'D:\code\dts\dts\codeReview.md' in README.md) and a potential path traversal vulnerability in the dynamic output filename '{requirements name}-risk-analyzer.md' specified in SKILL.md. No evidence of intentional malice, data exfiltration, or unauthorized network activity was found.