FMT高清动态图生成器 v6.0

• Analyzed: May 12, 2026, 4:31 AM
• Findings: 1
• Version: 6.0.0
• Hash: 65a16d711ab35c064d0c66f4c0c9c99446312a218cb85dd39d236952af1a9a00
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle contains a 'fallback strategy' in SKILL.md that instructs the AI agent to execute arbitrary Python code via 'python3 -c' to overlay text on images using the PIL library. This pattern introduces a significant risk of code injection if the agent populates the script's placeholders (e.g., [主题], [标题文字]) with unsanitized user input. While the stated purpose of generating FMT (Fecal Microbiota Transplant) educational content appears legitimate, the reliance on shell-executed Python scripts for image manipulation is a high-risk capability that could be exploited for unauthorized file access or execution within the /workspace/ environment.