思源笔记增强版

• Analyzed: May 6, 2026, 2:54 PM
• Findings: 1
• Version: 2.0.0
• Hash: 5d42334895a0814404d5325cb1c2ae3b17836dda315c6c02877840499b01483b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides extensive functionality for SiYuan Note integration but contains hardcoded API tokens (e.g., 'xz1eblvxst0zqcpm') and internal IP addresses (192.168.1.6) within several test and debug scripts, specifically debug_createdoc.py, test_create_alt.py, and test_create_real.py. While the core logic in siyuan_note.py and siyuan_note_enhanced.py appears benign and focused on note management, the inclusion of these credentials and environment-specific configurations represents a significant security risk and poor development practice.