Cn Math Expression

• Analyzed: May 14, 2026, 4:56 AM
• Findings: 1
• Version: 1.0.0
• Hash: a5eb699230bf4dc113a6d22bff5cd1b3fb7816f46abd063c753d262b7a4740b4
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill implements a math expression evaluator in `scripts/math_eval.py` using Python's `eval()` function. While it attempts to sandbox execution by clearing `__builtins__` and providing a whitelist of functions, this approach is historically vulnerable to sandbox escape techniques that can lead to Remote Code Execution (RCE). It is classified as suspicious due to this critical security flaw, although there is no explicit evidence of intentional malicious logic or data exfiltration.