Pangolinfo Scrape (Legacy)

• Analyzed: May 18, 2026, 6:52 AM
• Findings: 1
• Version: 1.0.1
• Hash: 14f7fbdbc144a61b19a22484a5398ddb09ac8ba98f3832b124a0a81e7d70f59e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate Python client and documentation for interacting with Pangolin's Google SERP and Amazon scraping APIs. The core script, `scripts/pangolinfo.py`, uses only Python standard libraries to perform authenticated requests to the official API endpoint (scrapeapi.pangolinfo.com). It handles sensitive credentials (PANGOLIN_EMAIL/PASSWORD) and tokens appropriately, including secure local caching in `~/.pangolin_token` with restricted file permissions (0o600). No evidence of data exfiltration, unauthorized execution, or malicious prompt injection was found.