Public Skill

• Analyzed: May 10, 2026, 6:50 AM
• Findings: 1
• Version: 1.0.0
• Hash: 1c3ad48c4cdafa5af1fe36c19696ad29b1be5d04330d232dbedbaddbbe2243ac
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides a legitimate mechanism for users to send notifications (e.g., weather, reports) to their own verified email addresses via a platform gateway (jprx.m.qq.com). The implementation in `router.cjs` includes strict validation to prevent sending to third-party recipients, and the `SKILL.md` instructions are well-defined with clear safety boundaries. No evidence of data exfiltration, malicious execution, or prompt injection was found.