中国裁判文书类案检索报告（得理科技）

• Analyzed: May 11, 2026, 9:56 AM
• Findings: 1
• Version: 1.0.1
• Hash: 17879a8a4213d4abb6d44b8a15ab9043600a4ef63ca2ca838ab7654340c9e2aa
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to generate legal case retrieval reports by querying the Deli Legal API (platform.delilegal.com). However, the script `scripts/search_cases.py` contains a significant security vulnerability: it explicitly disables SSL certificate verification and hostname checking (`ssl.CERT_NONE`), which exposes the API key and sensitive legal query data to Man-In-The-Middle (MITM) attacks. While the behavior aligns with the stated purpose and no clear evidence of intentional malice was found, this high-risk implementation flaw warrants a suspicious classification.