瑜伽学员管理

• Analyzed: May 11, 2026, 2:46 AM
• Findings: 1
• Version: 1.0.0
• Hash: 310f6ee8148022ac9dbe3ca172dcb29983efafd12516b231de9c424915c17fa8
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate management system for yoga student records and course tracking. It uses SQLite for local data storage and SMTP for sending session logs and reports to the user's own email. The code follows good security practices, such as using parameterized SQL queries and field whitelisting in `database.py` to prevent SQL injection. No evidence of data exfiltration, malicious execution, or prompt injection was found; the email functionality is transparently designed for user self-notification.