Zyt credentials guard

• Analyzed: Mar 26, 2026, 2:36 PM
• Findings: 1
• Version: 0.5.0
• Hash: 223983d2c5d9696d7b8adfc914e50c34ec75288436cb0c106683c7a656b238a7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a security-conscious credential manager for the Chanjing API. It explicitly instructs the AI agent to avoid requesting or echoing secrets (AK/SK) within the chat interface, instead guiding the user to manage them in a local configuration file (~/.chanjing/credentials.json). The logic involves opening a legitimate login URL (chanjing.cc) and performing local token refreshes via the official API endpoint, with no evidence of data exfiltration or malicious execution.