通过调用成均智能的HTTP API接口，检测文本中的敏感信息、语法错误、标点符号问题等

• Analyzed: May 13, 2026, 1:16 AM
• Findings: 1
• Version: 1.0.1
• Hash: b49a4b534ed63d2dfa0d57bc6a0541656f75a69682a5193f1cab0c9741c17743
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill contains a significant security vulnerability in main.py where it globally disables SSL certificate verification (ssl._create_unverified_context), which exposes the agent to Man-in-the-Middle (MITM) attacks. Additionally, main.py contains redundant and poorly implemented code, including duplicate function definitions for check_content() that reference undefined variables (e.g., TOKEN_URL, get_api_credentials). While the behavior aligns with the stated purpose of calling the vsbclub.com API for content moderation, the intentional weakening of transport security and poor code quality warrant a suspicious classification.