上海律协考核自动视频播放

• Analyzed: May 11, 2026, 6:05 AM
• Findings: 1
• Version: 1.0.0
• Hash: 8048b6d81dd03aac124e83aef7ab828627682bba8624081e35a8a2c0f873c058
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill automates video playback on lawschool.lawyerpass.com using persistent cron jobs and JavaScript injection to handle Angular-based navigation and enrollment gates. It employs risky capabilities such as session manipulation via history.pushState interception and lacks input sanitization when constructing JS strings from scraped course titles in SKILL.md and references/workflow.md, which could lead to script injection. While these behaviors are aligned with the stated purpose, the use of persistent background execution and unsanitized JS execution qualifies as suspicious under the provided criteria.