思源笔记增强版

• Analyzed: May 6, 2026, 2:36 PM
• Findings: 1
• Version: 2.0.0
• Hash: 0be7730f230e0abbcc73d91ba24474df19fa76c7dc6fb2319ae1d1c80ea21845
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides integration with SiYuan Note for note management, article clipping, and template rendering. However, several files intended for debugging and testing (debug_createdoc.py, test_create_alt.py, and test_create_real.py) contain hardcoded API tokens ('xz1eblvxst0zqcpm') and internal IP addresses ('192.168.1.6'), which represents a credential leakage vulnerability. While the core functionality in siyuan_note.py and siyuan_note_enhanced.py appears to align with the stated purpose, the inclusion of these hardcoded secrets in the distributed bundle is a significant security oversight.