XiaoPai Player Control

• Analyzed: May 11, 2026, 6:01 AM
• Findings: 1
• Version: 1.1.0
• Hash: 0590f62e85d048998ab4fe6c749cbad9575332765d984708f37b21e8806560a9
• Source: palm
• External report: View on VirusTotal

Findings (1)

The xiaopai-player-control skill is a legitimate tool for controlling XiaoPai media players over a local network via HTTP and TCP. The skill includes well-documented instructions in SKILL.md and a helper script (xiaopai-ctl.sh) that uses standard tools like curl, nc, and mDNS for discovery. The code follows good practices, such as using proper quoting in shell scripts to prevent injection and providing user-facing warnings for destructive commands like rebooting (RBT). No evidence of malicious intent, data exfiltration, or unauthorized access was found.