MIJ Kakao Local API (PowerShell)

• Analyzed: May 12, 2026, 3:59 AM
• Findings: 1
• Version: 1.0.0
• Hash: 084dee66892438a7093404cd5662304830128a926b53ccacbacbb0b23e0f9885
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to its reliance on `curl.exe` (an external executable) for making API calls, where user-controlled input (`-Query` parameter) is incorporated into the command line. While the script attempts to mitigate shell injection risks by URL-encoding parameters using `[System.Uri]::EscapeDataString` and hardcoding the API endpoints to Kakao domains, the execution of an external binary with user-derived input still presents a potential vulnerability surface for command injection, even if mitigated. There is no evidence of intentional malicious behavior such as data exfiltration to arbitrary endpoints, persistence mechanisms, or prompt injection attempts in `SKILL.md`. Local file system access is confined to the skill's `data/` directory for legitimate purposes like configuration and caching.