途牛旅游CLI技能

• Analyzed: Apr 3, 2026, 10:16 AM
• Findings: 1
• Version: 1.0.4
• Hash: 6c866599445d933d8e88caf03d61a986d32bcb63f336af7063bf3b28d59521bf
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill functions as a Tuniu travel assistant that executes commands via the `tuniu-cli` using shell execution, which is a high-risk capability. It handles sensitive personally identifiable information (PII), such as passenger names and ID numbers, and includes a 'dynamic discovery' feature that fetches remote service definitions from `https://openapi.tuniu.cn`. While these capabilities are aligned with the stated travel-booking purpose, the instruction to pass JSON arguments within single quotes in a shell command (`tuniu call ... -a '<JSON>'`) without explicit sanitization guidance creates a significant shell injection surface, fitting the criteria for a suspicious classification due to inherent architectural vulnerabilities.