IMA知识库上传

• Analyzed: May 11, 2026, 12:06 PM
• Findings: 1
• Version: 1.0.0
• Hash: 94348245dddf215ce9dc61db4551079d074902c99ef83444a7795fdadeeb9fdf
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill contains hardcoded absolute file paths (C:\Users\shibi\...) in SKILL.md, which is a significant security and portability flaw that reveals local system information. While the logic aligns with the stated purpose of uploading documents to the IMA knowledge base, the inclusion of specific internal Knowledge Base IDs and references to external scripts (cos-upload.cjs) not included in the bundle suggests a poorly packaged or environment-specific tool that could lead to unexpected behavior if executed in a different context.