4chan-reader

• Analyzed: May 12, 2026, 3:14 AM
• Findings: 1
• Version: 1.0.0
• Hash: 80c6c160f48912413dc58b774be2977ef9b859e1c70051464d66b1a3c8d13d13
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a Python script to fetch 4chan content and optionally save it to a local file. While its network access to 4chan is aligned with its stated purpose, the script allows writing extracted content to an arbitrary user-specified directory (`output_root_dir`) via `os.makedirs` and `open()` in `scripts/chan_extractor.py`. This capability, despite being documented in `SKILL.md` and `scripts/chan_extractor.py`, represents a significant file system access risk, as it could be leveraged by a malicious prompt (external to this skill) to write to sensitive locations, classifying it as suspicious rather than benign.