社媒热搜助手

• Analyzed: May 15, 2026, 8:01 AM
• Findings: 1
• Version: 1.1.0
• Hash: f4e8aad93b67e75cb9680b159f9bdab818fb7dcc8e0b538cdcc2fe310a54eed7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate interface for social media trend analysis and sentiment monitoring across Chinese platforms (Weibo, Douyin, etc.) via a remote MCP proxy. It uses a machine fingerprint (a SHA-256 hash of the local username and hostname) in `social_client.py` to enforce a 200-call free quota, which is disclosed in the documentation. The code is well-structured, uses standard libraries for HTTP communication, and lacks any indicators of malicious intent, such as data exfiltration, unauthorized command execution, or harmful prompt injection.