Stock Analysis 6.2.0

• Analyzed: May 12, 2026, 3:58 AM
• Findings: 1
• Version: 1.0.0
• Hash: d9aa5d580021748baf6630dbeabe916cc35311a33a2f808b45f0ef5d79eab3b1
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to its explicit requirement for users to provide Twitter/X authentication tokens (AUTH_TOKEN and CT0, which are session cookies) in an `.env` file. The `scripts/hot_scanner.py` and `scripts/rumor_scanner.py` files then load these environment variables and execute an external `bird` CLI via `subprocess.run` to interact with the user's Twitter/X account. While the stated purpose is benign (social sentiment analysis), this grants the skill direct access to the user's social media session, representing a high-risk capability that could be exploited for unauthorized actions if the `bird` CLI or the skill's code were compromised or misused. There is no clear evidence of intentional malicious behavior, but the inherent risk associated with handling and using active session cookies for an external service warrants a 'suspicious' classification.