WPS Web Builder

• Analyzed: Apr 18, 2026, 12:36 PM
• Findings: 1
• Version: 1.0.0
• Hash: 6eb6c0f880baaa0fc79acdcad5ad96eabef67d816f6d12e8358f8a998f0c79f8
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides a comprehensive framework for building web applications but utilizes high-risk execution patterns in SKILL.md. Specifically, it directs the agent to use Python's subprocess module with shell=True to execute npm and npx commands, which is a known shell injection vulnerability. While these capabilities (file writing and shell execution) are aligned with the stated purpose of a web builder, the lack of input sanitization in the generated command strings and the broad system access required for these operations warrant a suspicious classification.