36氪自助报道 - 36kr AI Report

• Analyzed: May 14, 2026, 7:16 AM
• Findings: 1
• Version: 1.0.7
• Hash: 3e637963e09424576ba330112512c4d5de2d2fb5d720c82630d2a005c743feb7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides legitimate functionality for fetching and displaying 36kr AI report articles from a public CDN (openclaw.36krcdn.com). The included Python and Shell scripts (fetch_aireport.py/sh) use standard libraries and common utilities like curl to retrieve JSON data, with no evidence of data exfiltration, malicious execution, or persistence. SKILL.md includes proactive security instructions to prevent the agent from interpreting retrieved content as commands and provides a functional guidance flow for users to discover related 36kr skills.