Bailian Usage Proxy

• Analyzed: May 10, 2026, 6:39 AM
• Findings: 1
• Version: 1.0.0
• Hash: 371b606cb1b1e082646bcf632b1b9dd921da49299969e51fbe4b454aea3340ef
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate proxy service for managing and tracking usage of Alibaba's Bailian (DashScope) AI platform. The code implements an OpenAI-compatible API that forwards requests to the official Alibaba endpoint (dashscope.aliyuncs.com), logs token usage in a local SQLite database, and provides a FastAPI-based admin dashboard for reporting. The shell scripts (start.sh, stop.sh) and Python logic (app/proxy.py, app/api.py) are well-structured, follow standard development practices, and contain no evidence of data exfiltration, backdoors, or malicious prompt injection.