Toutiao News Trends

• Analyzed: May 16, 2026, 4:01 AM
• Findings: 1
• Version: 0.1.0
• Hash: cae259f59807895361ef224986861483538a86facc4b633ae9bec1bbd49e666c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. The `SKILL.md` provides clear instructions for fetching news trends from `www.toutiao.com` and contains no prompt injection attempts. The `scripts/toutiao.js` Node.js script implements a web scraper that exclusively targets `www.toutiao.com`, uses standard web scraping practices (random User-Agents, HTTP compression), and properly sanitizes its single command-line argument (`limit`). There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or other harmful behaviors.