Zuimei Zjz Api

• Analyzed: May 15, 2026, 7:26 PM
• Findings: 1
• Version: 0.1.2
• Hash: cb2de05758f9ba3681105ded1f2dcd3816606bc723133e9647c42c7b431d8d5c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate integration for the 'Zuimei ZJZ' AI image processing API. It includes comprehensive documentation (API.md, SKILL.md), OpenAPI specifications, and functional SDKs in Python and TypeScript. While SKILL.md contains hardcoded API credentials, they are explicitly labeled as 'free test credentials' to facilitate a trial experience. The code implements standard security practices like HMAC-SHA256 request signing and uses reputable libraries (requests, axios). No evidence of data exfiltration, unauthorized command execution, or malicious prompt injection was found; the instructions for the AI agent are strictly aligned with the stated purpose of photo processing and user guidance.