Rrbdagent

• Analyzed: May 11, 2026, 7:38 AM
• Findings: 1
• Version: 1.0.1
• Hash: 53e2ccae7a8387b0de1ee81dd25553bb9853692066248d4de41ce4157e5d0ef1
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is an automation agent for the RRBD Admin video generation platform. It is classified as suspicious due to poor security practices that create significant vulnerabilities, specifically prompting for and storing user credentials (mobile and password) in plain text within 'config.json' (api_client.js). Furthermore, numerous scripts (e.g., 'check_now.js', 'create_video_laozeng_shuai.js', and 'index.js') contain hardcoded credentials for a specific test account (18098901246). While these behaviors are aligned with the stated purpose of API automation and testing, the handling of sensitive authentication data is insecure and poses a high risk of credential theft.