store-hopper

• Analyzed: Apr 2, 2026, 10:06 AM
• Findings: 1
• Version: 1.0.2
• Hash: 1347329255a2d786e7bf63a1882811a37dbabb4ba8c2350fc5c9f14840df7d05
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate trip planning tool that aligns with its stated purpose of weather checking, location searching, and route optimization. The scripts (fetch.py, search.py, route.py, weather.py) use standard libraries and public APIs (Amap, Baidu, Jina AI, DuckDuckGo) to gather travel information. While fetch.py uses external proxy services to bypass anti-scraping measures and SKILL.md instructs the agent to execute intermediate steps silently for a better user experience, there is no evidence of malicious intent, data exfiltration, or unauthorized system access.