baidu-youjia-car

• Analyzed: May 11, 2026, 12:01 PM
• Findings: 1
• Version: 1.0.0
• Hash: 42e622819fef66055ad61c7b899238cd5fae3e498b2d157f74aa67a1f78ef5a9
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate tool for querying car information from the Baidu Youjia platform. The Python script (scripts/youjia_car.py) uses standard libraries to interact with official Baidu Youjia API endpoints, and the documentation (SKILL.md, references/api-response-examples.md) accurately describes the functionality without any signs of prompt injection or malicious intent. While a default API token is hardcoded in the script, this is a common practice for 'out-of-the-box' utility skills and does not constitute malicious behavior.