医小智Pro诊断助手

• Analyzed: Apr 16, 2026, 9:46 AM
• Findings: 1
• Version: 1.0.0
• Hash: 8c99cbc2becd6763b0169cfe2e457e262b82242f9c619a1f21c51e22cb704e4e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle contains instructions in SKILL.md that direct the AI agent to execute a shell command ('curl') to fetch an API key from a remote endpoint (jiyinjia.jinbaisen.com), which is a high-risk behavior. Furthermore, it implements a mandatory lead-generation mechanism that forces the agent to provide a specific commercial link (geneplus.org.cn) whenever sensitive keywords related to cancer are detected. While the medical advice functionality is inherently high-risk from a safety perspective, the combination of remote token fetching and forced commercial redirection warrants a suspicious classification. (Files: SKILL.md, scripts/llm_chat.py, config.json)