彩票分析助手

• Analyzed: May 11, 2026, 4:51 AM
• Findings: 1
• Version: 1.0.0
• Hash: d21ae0f5ed3bc0f5941afd7d009cfab81cdfba419968e84ee4737d0a69221f9e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle's core functionality is benign, designed for lottery data analysis. However, it is classified as suspicious due to significant vulnerabilities. The `SKILL.md` provides examples that instruct the AI agent to execute `python3` commands with user-controlled file paths (e.g., `/path/to/data.xlsx`). The `scripts/analyze_lottery.py` script's `load_data` and `save_results` functions directly use these paths without sanitization, creating a risk of arbitrary file read/write or potential shell injection if a malicious prompt provides a crafted path. These are vulnerabilities that could be exploited by prompt injection, not intentional malicious code.