36氪AI测评 - 36kr AI Notes

• Analyzed: May 14, 2026, 7:30 AM
• Findings: 1
• Version: 1.0.5
• Hash: d0fbd155e5b7e7f3e3a23173daf9ccb57515f4cba68a9d5c698f0f45b507f572
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate tool for fetching and displaying AI product evaluation notes from a 36kr-affiliated CDN (openclaw.36krcdn.com). It includes functional Python and Shell scripts (fetch_ainotes.py, fetch_ainotes.sh) that use standard libraries to retrieve JSON data. While SKILL.md contains instructions for the agent to cross-promote and assist in installing related skills, this behavior is transparently documented and requires user consent, posing no inherent security risk beyond standard platform features.