Pro Zh Summary

• Analyzed: May 11, 2026, 5:27 AM
• Findings: 1
• Version: 1.1.0
• Hash: f501389c0a214990b538ed0a57cd8b7981022e9093b1d04ca259d516cf30214e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate Chinese text summarization tool using a local MT5 model. It employs a client-server architecture where `main.py` acts as a CLI and `server.py` hosts a FastAPI-based inference engine on a local port (28199) to keep the model in memory for performance. While it uses `subprocess.Popen` to silently launch the backend server and allows reading local files via the `--file` argument, these behaviors are consistent with its stated purpose of processing long documents and optimizing AI agent response times. No evidence of data exfiltration, malicious persistence, or harmful prompt injection was found.