Ecommerce Product Pro

• Analyzed: Apr 15, 2026, 7:06 AM
• Findings: 1
• Version: 1.0.1
• Hash: 682ccba881bbc3208b62eb8da58f9905110fd916fcff849c45f165db9659e347
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as suspicious because it claims to be a professional AI-powered ecommerce tool, yet the implementation in `index.js` is entirely simulated, using `Math.random()` to generate all 'research' data. Furthermore, `SKILL.md` contains explicit instructions for the AI agent to facilitate financial transactions via Alipay QR codes and USDC payments for 'Pro' services that the provided code is incapable of delivering. The documentation also references several non-existent files (e.g., `tasks/KNOWLEDGE.md`, `tasks/SESSION-SNAPSHOT.md`), suggesting the bundle is deceptive or intended to solicit fraudulent payments.