fofa-query

• Analyzed: Mar 21, 2026, 7:46 PM
• Findings: 1
• Version: 1.0.1
• Hash: 9069198381087e6ce67bb5faabb47e1f0268467c7ecd1525917503cf8fbd0de7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate integration for the FOFA network asset search engine. The Python script `scripts/fofa_query.py` correctly implements the FOFA API specifications, including Basic Authentication and Base64 query encoding, and communicates only with the official `fofa.info` domain. There is no evidence of data exfiltration, malicious prompt injection, or unauthorized code execution.