IELTS Tuyaya Upload 雅思成绩一键上传

• Analyzed: May 10, 2026, 6:35 AM
• Findings: 1
• Version: 1.1.0
• Hash: 3ada4e71fbc96cf2c856355537c868588222a2cbcf7837254db0129dfecc13f6
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate utility designed to upload IELTS study data to the tuyaya.online platform. The core logic in `scripts/upload.js` uses standard Node.js APIs to handle user authentication and batch JSON uploads, implementing good security practices such as restricted file permissions (0600) for the local token storage (`~/.ielts-tuyaya-token`). The AI instructions in `SKILL.md` are transparent and include safety directives, such as instructing the agent not to handle or generate user passwords, and there is no evidence of malicious data exfiltration or unauthorized execution.