Zyt avatar

• Analyzed: Mar 26, 2026, 12:46 PM
• Findings: 1
• Version: 0.2.0
• Hash: 9b6534b0bc2439da48567f72c9200eb5ac811316fcc6c12c2c2bd20881769ec2
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides a legitimate integration for the Chanjing Avatar API to generate lip-sync videos. It manages authentication by reading and storing credentials in a local configuration file (~/.chanjing/credentials.json) and communicates exclusively with the official service domain (open-api.chanjing.cc). The code in scripts/_auth.py follows standard practices for token management and lacks any indicators of data exfiltration, malicious execution, or harmful instructions.