Doubao Image

• Analyzed: May 12, 2026, 4:30 AM
• Findings: 1
• Version: 1.0.0
• Hash: 9370e72ccc3116344aa80ef36819c792ac10d9529db0c130c8a883fa2e53278b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle exhibits significant inconsistencies between its stated purpose and actual implementation. While the `SKILL.md` files and `package.json` describe a 'Zhipu web search' or 'Zhipu web image' skill using the `open.bigmodel.cn` API, the `skill/scripts/search.sh` script actually performs 'Doubao image generation' by calling the `ark.cn-beijing.volces.com` API. This misrepresentation of functionality and API endpoint, across `SKILL.md`, `package.json`, and `skill/scripts/search.sh`, is highly suspicious as it could lead to unexpected behavior, costs, or a lack of transparency for the user or agent.