Expression Coach 表达力训练教练

• Analyzed: May 18, 2026, 8:08 AM
• Findings: 1
• Version: 1.1.0
• Hash: 75f3b2892289c902fc968cf4d46ad2b1848e466a38d67b0fe73a00cf46aa9c63
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is an expression coach that uses OpenAI Whisper for audio transcription and Feishu Bitable for data logging. It is classified as suspicious because the SKILL.md instructions direct the AI agent to execute raw shell commands (whisper and curl) using potentially unsanitized inputs like <audio_file>, which creates a risk for shell injection. While the behavior is aligned with the stated purpose, the reliance on shell-piped logic for API authentication and file processing represents a significant security vulnerability.