Qiniu Upload

• Analyzed: May 10, 2026, 6:39 AM
• Findings: 1
• Version: 0.1.0
• Hash: 6e341e0794292f1dc06a0e7ec9ebcd327a89a4f04c436f0fb7d40aac2679e822
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate utility for uploading local files to Qiniu Cloud storage. The implementation in `scripts/upload.js` correctly uses environment variables for credentials, generates standard Qiniu upload tokens using HMAC-SHA1, and communicates only with official Qiniu API endpoints (e.g., upload.qiniup.com). No evidence of data exfiltration, malicious execution, or prompt injection was found.