中文 EN
Start Review
Skill Trust Decision

EvoChroma - Evolutionary Memory Store

ChromaDB向量数据库插件，功能真实，无恶意行为证据，但SKILL.md声明与实际能力存在偏差，且未声明shell权限，存在供应链风险

Install decision first Source: ClawHub Scanned: Apr 8, 2026
Files 13
Artifacts 4
Violations 3
Findings 5

Why this conclusion was reached

2/4 dimensions flagged
Block
Declared vs actual capability

3 undeclared or violating capabilities were inferred.

Block
Hidden execution and egress

1 high-risk artifacts or egress signals were extracted.

Pass
Attack chain and severe findings

There is no explicit malicious chain in the report.

Review
Dependencies and supply chain hygiene

3 dependency or supply-chain issues need attention.

What drove the risk score up

SKILL.md未声明allowed-tools +5

install.sh执行shell写入文件系统，但SKILL.md未声明任何allowed-tools

文档-行为不一致 +5

SKILL.md声称「完全离线运行、零数据泄露风险」，但chromadb_plugin.py支持HttpClient云端模式和api_key配置

pip3无版本锁定 +5

install.sh:24 pip3 install chromadb sentence-transformers pyyaml无版本约束，存在供应链风险

未声明文件写入路径 +5

install.sh写入~/.openclaw/extensions/和~/.openclaw/config/，SKILL.md未提及

Most important evidence

Medium Doc Mismatch

文档声称离线运行但代码支持云端连接

SKILL.md明确声明「🔒 完全离线运行，无需付费API，零数据泄露风险」，但chromadb_plugin.py第20-28行实现了HttpClient云端模式，支持host/port/api_key配置，与声明不符

chromadb_plugin.py:20
将云端模式能力写入SKILL.md功能列表，或移除HttpClient代码保持纯离线
Medium Supply Chain

install.sh中pip3依赖无版本锁定

install.sh第24行pip3 install chromadb sentence-transformers pyyaml三个依赖均无版本约束，可能安装到包含恶意代码的任意版本

install.sh:24
改为 pip3 install chromadb>=0.4.0 sentence-transformers>=2.2.0 pyyaml>=6.0
Low Priv Escalation

SKILL.md未声明任何allowed-tools

install.sh执行shell命令并写入~/.openclaw/目录，但SKILL.md完全未声明allowed-tools字段，无法让用户/平台预知所需权限

SKILL.md:1
在SKILL.md中补充 allowed-tools: [Bash, Read, Write]
Low Sensitive Access

install.sh未声明写入用户目录

install.sh写入~/.openclaw/extensions/chromadb和~/.openclaw/config/，涉及用户目录写操作，SKILL.md未提及

install.sh:30
在SKILL.md中声明会写入~/.openclaw/目录
Info Doc Mismatch

文档包含示例凭证占位符

docs/zh-CN/ChromaDB插件_配置说明.md:88包含示例api_key: your-production-api-key，属占位符非真实凭证，但作为配置示例出现在生产配置示例段落中存在误导风险

docs/zh-CN/ChromaDB插件_配置说明.md:88
将生产配置示例中的api_key改为环境变量引用方式，如${CHROMADB_API_KEY}

Declared capability vs actual capability

Filesystem Block
Declared NONE
→
Inferred WRITE
install.sh:30 mkdir -p ~/.openclaw/extensions/chromadb
Shell Block
Declared NONE
→
Inferred WRITE
install.sh:24 pip3 install chromadb sentence-transformers pyyaml
Network Block
Declared NONE
→
Inferred READ
chromadb_plugin.py:27 HttpClient支持云端ChromaDB连接，SKILL.md声称完全离线

Suspicious artifacts and egress

High API Key
api_key: "your-production-api-key"

docs/zh-CN/ChromaDB插件_配置说明.md:88

Medium External URL
https://clawhub.ai/lulan3954-a11y/chromadb-plugin

README.md:12

Medium External URL
https://your-chromadb-service.com

docs/zh-CN/ChromaDB插件_配置说明.md:24

Medium External URL
http://192.168.1.100

docs/zh-CN/ChromaDB插件_配置说明.md:86

Dependencies and supply chain

PackageVersionSourceKnown vulnNotes
chromadb * (无版本约束) pip (install.sh:24) No 无版本锁定，存在供应链风险
sentence-transformers * (无版本约束) pip (install.sh:24) No 无版本锁定
pyyaml * (无版本约束) pip (install.sh:24) No 无版本锁定

File composition

13 files · 1108 lines
Markdown 8 files · 697 linesPython 3 files · 343 linesShell 1 files · 48 linesYAML 1 files · 20 lines
Files of concern · 5
chromadb_plugin.py Python · 189 lines
文档声称离线运行但代码支持云端连接
docs/zh-CN/ChromaDB插件_配置说明.md Markdown · 113 lines
文档包含示例凭证占位符 · api_key: "your-production-api-key" · https://your-chromadb-service.com · http://192.168.1.100
README.md Markdown · 65 lines
https://clawhub.ai/lulan3954-a11y/chromadb-plugin
SKILL.md Markdown · 65 lines
SKILL.md未声明任何allowed-tools
install.sh Shell · 48 lines
install.sh中pip3依赖无版本锁定 · install.sh未声明写入用户目录
Other files · ChromaDB插件_LanceDB迁移指南.md · ChromaDB插件_API使用示例.md · test_chromadb.py · ChromaDB插件_快速安装指南.md · migrate_lancedb.py · quick_start_en.md +1

Security positives

代码结构清晰，为真实的ChromaDB向量数据库插件，无混淆或恶意代码
test_chromadb.py包含完整的单元测试，覆盖增删改查和混合检索
migrate_lancedb.py实现标准数据库迁移逻辑，功能完整
无base64编码执行、eval调用、敏感路径遍历等高危指标
无数据外泄、凭证收割或远程控制行为
install.sh有Python版本检查和错误处理