中国法律法规检索（得理科技）

• Analyzed: May 11, 2026, 8:18 AM
• Findings: 1
• Version: 1.0.1
• Hash: 1dcdc3a3bd1a6437df32f803cef5be4969bb2958227095f27a3748992ba29f97
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed for legal document retrieval using the Deli Legal API, but it contains a significant security vulnerability. Specifically, the script `scripts/search_laws.py` explicitly disables SSL certificate verification and hostname checking (`ssl.CERT_NONE`), making the connection susceptible to Man-In-The-Middle (MITM) attacks. While the code logic and instructions in `SKILL.md` appear aligned with the stated purpose and do not show clear malicious intent or data exfiltration, this high-risk security flaw necessitates a suspicious classification.