search-1688-supplier

• Analyzed: Mar 24, 2026, 2:26 AM
• Findings: 1
• Version: 1.0.4
• Hash: 211f59a99cbb30b569dbffce455444de2e830210f38a9ff82fc6c5ec24299805
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate tool for searching 1688 suppliers via the AlphaShop API. The main script (`scripts/search.py`) uses standard libraries to handle API authentication via JWT and perform searches based on text, image URLs, or product links. The instructions in `SKILL.md` provide operational guidance for the AI agent without any evidence of prompt injection or malicious intent. No data exfiltration, unauthorized execution, or obfuscation was found.