Experience Manager

• Analyzed: Apr 9, 2026, 12:21 PM
• Findings: 1
• Version: 1.3.1
• Hash: e7f3b503aa4c6eee7d0a58f35dfacc8fe19bf0ab23ea536e09d088efa55dbf2c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle implements a system for agents to 'learn' by downloading ZIP packages from a remote hub (expericehub.com) and appending the content to core behavioral files like SOUL.md and AGENTS.md. This mechanism facilitates persistent remote prompt injection, as any content in the downloaded 'experience' becomes part of the agent's core instructions. The domain used throughout the scripts, 'expericehub.com' (missing the 'n'), is a significant red flag for typosquatting or a non-standard endpoint. While the code in learn.mjs and publish.mjs performs its stated purpose and includes a dry-run/confirmation step, the architectural design allows for remote takeover of agent behavior via untrusted third-party content.