敏感内容扫描器

• Analyzed: May 6, 2026, 1:52 AM
• Findings: 1
• Version: 3.2.0
• Hash: c98a9c2906a3d1ee3b5fc37034d5ca801d58bdc286bada8ed02070aeda8fef6f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a functional utility designed to scan documents for PII (Personally Identifiable Information) and sensitive keywords. The core logic in `scripts/scan_sensitive.py` uses regex and weighted dictionaries to identify sensitive data in various file formats (Office docs and plain text) and generates local reports in HTML, Markdown, or JSON. While the script includes a mechanism to load encrypted dictionaries using a hardcoded password derivation seed (a weak cryptographic practice), there is no evidence of malicious intent, data exfiltration, or unauthorized command execution. The behavior is fully aligned with the stated purpose in `SKILL.md`.