Novai360 跨境电商智能分析

• Analyzed: Apr 3, 2026, 7:11 PM
• Findings: 1
• Version: 1.0.4
• Hash: 2dc97d248c6ae6007ae99fd766fcf0cce580384211a1b7c53713669d15e6d19a
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate market analysis tool for Amazon sellers that interfaces with the Novai360 API (api.novai360.com). The code in index.js and index-v7.js implements a standard workflow: using the host LLM to identify user intent, fetching market data from the external API, and then using the LLM again to summarize the results into a report. No evidence of data exfiltration, unauthorized file access, or malicious prompt injection was found; the behavior is consistent with the functionality described in SKILL.md and manifest.json.