MemoleCard-zh

• Analyzed: May 11, 2026, 7:06 AM
• Findings: 1
• Version: 1.0.4
• Hash: 36ece6bc77c08f9afb557beab9fb8540c9f17908048ab1f1736afdbb4c35eac0
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill script in SKILL.md automates article-to-card conversion on moccard.com but includes a high-risk 'backup download' routine. This mechanism extracts the browser's active session cookies (document.cookie) and transmits them via curl to an external IP address provided in the {{ip}} variable. While this is presented as a functional fallback for downloading generated files, the extraction and transmission of session tokens to a remote endpoint is a classic data exfiltration pattern and poses a significant risk of session hijacking.