Cms Tbs Training

• Analyzed: Apr 2, 2026, 11:46 AM
• Findings: 1
• Version: 0.80.0
• Hash: a6ac4a4f7fd94a3a4a04aa30fd46c0c845fd56942f52c9c93667c12ef17f324c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle exhibits a systematic security vulnerability where nearly all execution scripts (e.g., scripts/basic/gpt-id.py, scripts/gpts/sse-suggest.py, and scripts/file/upload-by-url.py) explicitly disable SSL certificate verification using ssl.CERT_NONE, which exposes the agent to Man-in-the-Middle (MITM) attacks. Additionally, SKILL.md contains instructions to force-install a dependency from an external GitHub repository (spzwin/cms-auth-skills.git), introducing a potential supply chain risk. While the code logic appears consistent with the stated purpose of interacting with the TBS training platform (mediportal.com.cn), these high-risk implementation flaws warrant a suspicious classification.