特价机票

• Analyzed: Mar 30, 2026, 11:46 AM
• Findings: 1
• Version: 1.0.0
• Hash: d9d0db301af4f080de0e6575db70d7908355a90d5034a4ce9c052628727a03e7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The flightAI skill bundle implements a flight booking assistant for the Fenbeitong platform but contains a significant security vulnerability. In `scripts/common.py`, the code explicitly disables SSL certificate verification using `ssl._create_unverified_context()` for all API requests to `https://app-gate.fenbeitong.com`. This high-risk behavior exposes sensitive Personal Identifiable Information (PII)—such as passenger names, phone numbers, and national ID numbers required for booking—to potential Man-in-the-Middle (MITM) attacks. While the code includes a comment acknowledging this should be removed in production, the inclusion of such a flaw in a tool handling PII warrants a suspicious classification.