喜乐姐真蚕丝喜被

• Analyzed: May 17, 2026, 12:16 AM
• Findings: 1
• Version: 0.1.0
• Hash: 6d46166d7ef10e0ee85b8343d6701cd6f01cc467f76918dc516126a38bd23f8b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate e-commerce integration for a silk quilt brand. It uses the Model Context Protocol (MCP) to provide product information, recommendations, and order processing. The backend (main.py) uses FastAPI and implements secure database interactions with SQLite using parameterized queries to prevent SQL injection. While the skill collects personally identifiable information (PII) such as names, phone numbers, and addresses, this behavior is transparently documented as necessary for the 'Cash on Delivery' service and is aligned with the stated purpose of the skill.