查看每日热门山寨代币

• Analyzed: May 11, 2026, 4:40 AM
• Findings: 1
• Version: 1.0.0
• Hash: 9b179fd6a0b68ba39ae7744268df6cfe8c5f100fc7c55f0ec833cc838b0111df
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It fetches public cryptocurrency data from the CoinGecko API, processes it, and generates a local HTML file for a daily report, which is then intended to be converted to PDF and sent via a messaging tool. All file operations (`/tmp/coins.json`, `/tmp/早报.html`) and network calls (to `api.coingecko.com`) are directly aligned with the stated purpose of generating a cryptocurrency report. The `SKILL.md` instructions are task-specific and do not contain any prompt injection attempts to subvert the agent's behavior, exfiltrate data, or perform unauthorized actions. Minor discrepancies between `SKILL.md` and the scripts (e.g., one vs. two API calls, hardcoded news vs. 'knowledge base') are functional deviations, not security concerns.