知识星球帖子抓取助手

• Analyzed: May 11, 2026, 5:42 AM
• Findings: 1
• Version: 1.0.0
• Hash: cd6aea2ed0397b3654d7112a2fea5025a9d1e2b43855143bc19e54923bf6d5c1
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a functional tool designed to fetch posts and group information from the Knowledge Planet (ZSXQ) platform via its official API (api.zsxq.com). The code in fetch_topics.js uses standard Node.js HTTPS modules, implements proper rate limiting with exponential backoff, and handles authentication via a user-provided token. While it contains a hardcoded default token and logic to persist tokens locally in token.json, there is no evidence of data exfiltration to unauthorized domains, malicious command execution, or harmful prompt injection instructions.