文游剧本生成系统

• Analyzed: May 11, 2026, 6:58 AM
• Findings: 1
• Version: 1.0.0
• Hash: d1f93ff11a026b85f9dafbd085fc3566038cc6f0c2e3ca822a457bafe24ef4d1
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to generate text-based game scripts and export them to the user's desktop as Word documents. It is classified as suspicious due to a potential shell injection vulnerability in the SKILL.md instructions, which direct the AI agent to execute a shell command using unvalidated variables (the game title) within a path involving '$HOME/Desktop'. While the Python script 'scripts/export_word.py' is functionally benign, the execution pattern in SKILL.md creates a risk where a malformed title could lead to unintended command execution on the host system.