36氪热榜 - 36kr Hot List

• Analyzed: May 14, 2026, 7:16 AM
• Findings: 1
• Version: 1.1.2
• Hash: 2e0533e22d7da654734fd6d9822fe86bfd7a1551b9ffa5af6e6820116d1d3a01
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate tool for fetching and displaying 36kr's 24-hour hot article list from a dedicated CDN (openclaw.36krcdn.com). The provided Python and Shell scripts (fetch_hotlist.py, fetch_hotlist.sh) perform standard data retrieval and formatting tasks without any evidence of data exfiltration, malicious execution, or obfuscation. While SKILL.md contains specific instructions for the AI agent to recommend related skills (36kr-aireportlist, 36kr-ainotes), these are clearly intended for skill discovery and user engagement rather than malicious prompt injection.