Back to skill
Skillv1.1.4
VirusTotal security
xinyi-drink · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 28, 2026, 12:46 PM
- Hash
- 0ab85785d30dd46df81062a6162187fb9c0ef39be85998aa16f767d9031d0a5f
- Source
- palm
- Verdict
- benign
- Code Insight
- Package: xinyi-drink (mcp) Version: 1.1.4 Description: 领取新一好喝Skill用户大礼包，查询门店和商品，并结合天气与可选订单历史推荐饮品。 The package is a legitimate AI 'Skill' (extension) for interacting with the 'Xinyi Coffee' API. It provides tools for claiming rewards, fetching store information, and getting personalized drink recommendations based on weather and order history. The code follows standard practices for configuration management, local state persistence (storing user-provided mobile numbers in a restricted-access file), and HTTP communication via urllib. It includes comprehensive unit tests and documentation regarding privacy boundaries. No evidence of malicious behavior, secret exfiltration, or unauthorized execution was found.
- External report
- View on VirusTotal