Zhihu Answer List API

• Analyzed: May 10, 2026, 6:43 AM
• Findings: 1
• Version: 1.0.0
• Hash: b86a79f5f3d925ea1021b8291f8f91237094c66bb0fa4b188b576d30f1bbf60d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a straightforward API wrapper for fetching Zhihu answer lists via the JustOneAPI service. The core logic in `bin/run.mjs` facilitates authenticated GET requests to `https://api.justoneapi.com` using a user-provided token. While the API design passes the authentication token as a query parameter (a common but suboptimal security practice), the skill's behavior is transparent, well-documented, and strictly aligned with its stated purpose without any signs of malicious intent or data exfiltration.