内控-集团客户部FY审计

• Analyzed: May 12, 2026, 2:36 AM
• Findings: 1
• Version: 1.0.1
• Hash: 3267ec27af1837120f66ee110bb483181b64879e5f2a1d4d422f8b05e7aed8f0
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a comprehensive financial auditing tool designed to recalculate sales commissions and detect fraud. It is classified as suspicious because it possesses high-risk capabilities, including broad file system access (reading, writing, and bulk deletion of SQLite and Excel files) and the execution of local Python scripts via the subprocess module (found in batch_process.py and batch_reparse_all.py). While these functions are aligned with the stated purpose of processing 30+ months of financial data, the ability to delete entire databases and execute shell commands represents a significant attack surface. No evidence of intentional malice, data exfiltration, or unauthorized remote access was detected; the logic is focused on internal controls and bank account anomaly detection (analyze_fanyong.py).