media-search

• Analyzed: Apr 2, 2026, 2:16 AM
• Findings: 1
• Version: 1.0.0
• Hash: c64e23d9ebb492577deb3ce3266574df94ef7470afc3485c1d98733c92eaaff9
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a functional tool for searching a media database via the Founder Electronics (fzdzyun.com) API, but it contains security vulnerabilities. Specifically, both `scripts/media_search.py` and `scripts/token_manager.py` explicitly disable SSL certificate verification (`verify=False`), which exposes the agent to Man-in-the-Middle (MITM) attacks when handling sensitive API keys and tokens. While the code follows its stated purpose and lacks clear evidence of intentional malice or data exfiltration, the intentional bypass of standard transport security protocols meets the criteria for a 'suspicious' classification.