data-analysis-partner

• Analyzed: May 10, 2026, 6:39 AM
• Findings: 1
• Version: 1.0.2
• Hash: 5ba78476890865edb4343c7c449d85bf6edf6b18c03d7a41ab72f5d008e47c1d
• Source: palm
• External report: View on VirusTotal

Findings (1)

Package: data-analysis-partner (mcp) Version: 1.0.2 Description: 智能数据分析 Skill：输入 CSV/Excel 文件和分析需求，输出带交互式 ECharts 图表的 HTML 自包含分析报告 The package is a data analysis tool that processes CSV and Excel files to generate interactive HTML reports using ECharts. It uses a Node.js wrapper (index.js) to execute a bundled Python script (analyze.py) via child_process.spawnSync. The code performs standard data processing tasks such as column type detection, statistical analysis, and chart configuration generation. It does not exhibit suspicious behaviors such as unauthorized credential access, unexpected network communication, or obfuscated payload execution. The use of a CDN for ECharts in the generated HTML is documented and standard for such tools.