中国裁判文书案例检索（得理科技）

• Analyzed: May 11, 2026, 9:56 AM
• Findings: 1
• Version: 1.0.1
• Hash: 803a77be5b3d9f2ab83e10a4cc60448b5838bdce02c8af3be3a8f36ae1b6561f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed for legal case retrieval via the Delilegal API (platform.delilegal.com). However, the script `scripts/search_cases.py` explicitly disables SSL certificate verification (`ssl.CERT_NONE` and `check_hostname = False`), which is a significant security vulnerability that exposes the API key and transmitted data to Man-In-The-Middle (MITM) attacks. While the code logic is consistent with the stated purpose, this intentional bypass of standard security protocols is a high-risk flaw.