杠精 Gangjing

• Analyzed: Apr 4, 2026, 2:06 PM
• Findings: 1
• Version: 1.0.9
• Hash: 91c82db139546c088d1ad39112ad3ff8bfaec9c6c40b7dcd34aa652a0db455fc
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'gangjing' skill is a red-teaming and code-review tool designed to identify vulnerabilities through contrarian analysis and automated testing. It includes a functional test harness (harness.py and harness.js in templates/attack-engine-kit.md) that dynamically loads and executes code from the user's workspace to verify security flaws using a library of injection payloads (SQLi, Command Injection, Path Traversal) defined in attack-patterns.md. While the skill incorporates safety constraints—such as path validation to prevent out-of-bounds access and process isolation for execution—the inherent capability to execute arbitrary code and generate malicious inputs constitutes a high-risk dual-use tool. No evidence of intentional malice, such as credential theft or data exfiltration, was found.