Back to skill
Skillv2.0.2
Static analysis security
News Fetcher (by luogao) · Deterministic local checks for risky code patterns and metadata mismatches.
Scanner verdict
MaliciousMar 10, 2026, 12:11 PM
- Summary
- Detected: malicious.env_harvesting
- Reason codes
- malicious.env_harvesting
- Engine
- v2.0.0
Evidence
criticalscripts/fetch_news.mjs:15
Environment variable access combined with network send.
malicious.env_harvesting