maxhub-toutiao

• Analyzed: May 13, 2026, 4:46 AM
• Findings: 1
• Version: 1.1.2
• Hash: 58a1b5f97bbba028f5247457501cb166ef5fb78de9ca3a75d12ee301f15a9593
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'maxhub-toutiao' skill bundle is a well-structured tool designed for collecting and analyzing news data from the Toutiao platform via the MaxHub API (aconfig.cn). The code includes sophisticated but legitimate features such as an LRU cache (shared/cache.js), request deduplication (shared/optimizer.js), and a decision engine (shared/decision.js) to optimize API usage and costs. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found; the use of the MAXHUB_API_KEY is consistent with the stated purpose of accessing a third-party data service.