train assistant

• Analyzed: Mar 30, 2026, 8:46 AM
• Findings: 1
• Version: 1.0.0
• Hash: 45c284927d4476fb53384da2296fce0ae8d2ad5e858c9d541879a486afa5feba
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a train booking assistant for the Fenbeitong platform that handles sensitive Personal Identifiable Information (PII), including names, ID card numbers, and phone numbers. It performs external network requests to 'openapiv2.fenbeitong.com' and 'app-gate.fenbeitong.com' to process bookings and payments. While the code in 'scripts/fb_train_api.py' and 'scripts/openai_adapter.py' appears aligned with its stated purpose, it contains hardcoded identifiers (X_APP_ID and an unused EMP_ID), which is a poor security practice. The inherent risk of handling PII and the use of hardcoded credentials/IDs without environment variable configuration warrants a suspicious classification despite the lack of clear malicious intent.