AIPyApp - AI自动化任务执行工具

• Analyzed: Mar 26, 2026, 2:41 AM
• Findings: 1
• Version: 1.0.0
• Hash: 3dade723dcbdc0fd131d542e66d1c293c4a2d8597cdb8f238af4a82549d9744f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill installs and utilizes 'aipyapp', a tool that generates and executes Python code based on natural language, which is an RCE-by-design pattern. The installation instructions in SKILL.md and scripts/install.sh perform system-wide modifications using sudo-level commands (apt install) and bypass Python environment protections (--break-system-packages). While no explicit evidence of data exfiltration or intentional backdoors was found, the broad execution capabilities and system-level requirements pose a high security risk.