ZSXQ Digest

• Analyzed: May 11, 2026, 5:44 AM
• Findings: 1
• Version: 0.1.0
• Hash: f5aa99f15b6e7e95c11cdaf5af2d4d08b7d3e4b059ff6ac796bf548874c74af3
• Source: palm
• External report: View on VirusTotal

Findings (1)

The zsxq-digest skill bundle is a highly functional tool designed to summarize updates from the Knowledge Planet (ZSXQ) platform. While it possesses high-risk capabilities—specifically the use of Chrome DevTools Protocol (CDP) in scripts like 'capture_browser_cookies.js' and 'prepare_zsxq_qr_bootstrap.js' to extract session cookies—these actions are transparently documented and strictly aligned with the stated purpose of local authentication bootstrap. The bundle demonstrates strong security awareness through 'scripts/package_public_release.py', which explicitly scrubs sensitive state files before packaging, and 'SKILL.md' instructions that mandate local-only storage of credentials in gitignored paths. No evidence of intentional data exfiltration, unauthorized remote control, or malicious prompt injection was found.