Tencent Yuanbao Gaokao - Score-to-Rank Lookup

• Analyzed: May 14, 2026, 11:51 AM
• Findings: 1
• Version: 0.1.2
• Hash: 37ab96c3b007320cc6a7a1802e7a7dc71af79fed3998fd30cb5224cbcac5fe62
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate tool for querying Chinese GaoKao (college entrance exam) score rankings. It extracts user parameters such as region, year, and score, then fetches data from a Tencent-owned domain (gaokao.search.qq.com) using the fetch_data.py script. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; a minor parameter naming inconsistency ('--ip') in the script appears to be a non-functional copy-paste error.