K241单词上传

• Analyzed: May 12, 2026, 2:21 AM
• Findings: 1
• Version: 1.0.0
• Hash: 704dc971cf8ae43ea9e1d3e287a41e27d701bac8183b7de55a2610a18c2c42fd
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle contains hardcoded credentials (username 'mick' and password 'vee') within SKILL.md for the target website k241.wooomooo.com. While the logic is clearly aligned with the stated purpose of automating word uploads for a vocabulary site, hardcoding credentials is a significant security vulnerability. The skill uses standard HTTP GET and POST requests to interact with the external domain, which is necessary for its function but constitutes a risky capability without clear malicious intent.