Zshijie Publisher

• Analyzed: May 11, 2026, 7:43 AM
• Findings: 1
• Version: 0.1.5
• Hash: ea9a71556e9f860cc3cde893b07327f0c1d4756722746273ca73646b83ff01d5
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a specialized tool for publishing and editing article and video content on the Z视介 (Z-Shijie) platform. The core logic in `scripts/publisher_cli.py` implements a legitimate QR-code login flow and interacts with official CZTV domains (cztv.com). The code includes proactive security measures such as redacting session IDs and cookies from console output and logs. While it uses a subprocess call to Node.js to generate QR codes, the inputs are properly escaped using JSON encoding, and no evidence of data exfiltration, unauthorized persistence, or malicious prompt injection was found.