Qmsg Push

• Analyzed: Apr 16, 2026, 3:36 AM
• Findings: 1
• Version: 0.1.0
• Hash: c5bf82fb1c8c16ca7ab3e8cea640f4ad4a6b24ca8161bee6bbe4c96fb1cd91d1
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate implementation for sending QQ notifications via the Qmsg service (qmsg.zendee.cn). The Python script `qmsg_push.py` reads a local API key from a JSON file and sends messages using the requests library as described in the documentation. No evidence of data exfiltration to unauthorized endpoints, malicious execution, or prompt injection was found.