1688 Multi Shop Compare

• Analyzed: May 9, 2026, 10:16 AM
• Findings: 1
• Version: 1.0.0
• Hash: 567db0d6e0e58f3032db70181a579fcc27a5a5fbc627290b7e4e11f45c15539b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate business analysis tool for comparing multiple 1688 shops. It uses standard HMAC-SHA256 signing for authentication and communicates exclusively with the official 'skills-gateway.1688.com' endpoint. The implementation includes explicit security constraints in SKILL.md to prevent sensitive AccessKeys (AKs) from being exposed to the user, and the telemetry in _tracker.py is transparently directed to the platform's usage reporting API. No malicious patterns, such as unauthorized data exfiltration, obfuscation, or harmful prompt injection, were detected.