Skill Trust Decision
rustok-wallet-tui
合法以太坊钱包工具，但存在文档-行为差异：安装脚本绕过审计、cosign验证非强制、外部Docker镜像不可审计
Why this conclusion was reached
0/4 dimensions flagged Pass
Declared vs actual capability
Declared resources and inferred behavior are broadly aligned.
Review
Hidden execution and egress
5 lower-risk artifacts were extracted and still need context.
Pass
Attack chain and severe findings
There is no explicit malicious chain in the report.
Pass
Dependencies and supply chain hygiene
Dependencies are present but no obvious high-risk issue stands out.
What drove the risk score up
用户运行curl|sh安装 +15
文档推荐但未强制要求先审查脚本
cosign验证非强制 +10
文档明确说明cosign缺失时跳过验证继续安装
外部不可审计Docker镜像 +15
实际钱包逻辑在ghcr.io镜像中，skill本身无代码可审计
credential相关风险 +5
keyring密码/seed phrase若在agent会话处理有泄露风险
Most important evidence
Medium Supply Chain
cosign验证可选导致供应链完整性未保障
文档明确表示cosign缺失或验证失败时安装继续而非中止，仅拉取摘要匹配镜像。这绕过了软件供应链安全最佳实践。
SKILL.md:42 要求cosign验证作为安装前置条件，或明确告知用户跳过验证的安全后果
Medium Doc Mismatch
远程脚本执行行为
文档建议用户运行curl|sh执行安装脚本，虽强调先审查但实际流程鼓励直接管道执行。用户可能跳过审查步骤。
SKILL.md:38 提供校验和验证选项，或强制要求下载后审查的流程
Medium Supply Chain
外部Docker镜像不可审计
skill本身无代码实现，实际钱包逻辑在ghcr.io/rustok-org/rustok-wallet-tui镜像中。镜像内容无法通过本地代码审查验证。
SKILL.md:56 考虑开源钱包核心代码，或提供镜像构建可重现性证明
Low Sensitive Access
keyring密码传递机制文档
文档描述了podman secret和docker _FILE传递机制，但未明确说明在agent无shell访问权限时如何保证安全。
SKILL.md:74 在文档中明确agent权限约束，确保keyring密码传递路径与agent权限隔离
Declared capability vs actual capability
Filesystem Pass
Declared NONE
→ Inferred WRITE
通过Docker volume挂载进行，文档明确警告不通过agent处理敏感凭证 Network Pass
Declared READ
→ Inferred READ
Ethereum RPC通信，文档声明一致 Shell Pass
Declared NONE
→ Inferred WRITE
用户主动执行安装命令，非agent自动执行 Suspicious artifacts and egress
Medium External URL
https://your-rpc SKILL.md:185
Medium Wallet Address
0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48 SKILL.md:299
Medium Wallet Address
0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 SKILL.md:300
Medium External URL
https://clawhub.ai/user/rustok skill-card.md:9
Medium External URL
https://clawhub.ai/rustok/skills/wallet skill-card.md:39
Dependencies and supply chain
| Package | Version | Source | Known vuln | Notes |
|---|---|---|---|---|
| ghcr.io/rustok-org/rustok-wallet-tui | v0.9.8 | GitHub Container Registry | No | 外部镜像内容不可审计 |
| cosign | 3+ | external | No | 可选依赖，缺失时不中止安装 |
File composition
3 files · 435 lines
Markdown 2 files · 413 linesJSON 1 files · 22 lines
Files of concern · 2
SKILL.md cosign验证可选导致供应链完整性未保障 · 远程脚本执行行为 · 外部Docker镜像不可审计 · keyring密码传递机制文档 · https://your-rpc · 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48 · 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
skill-card.md https://clawhub.ai/user/rustok · https://clawhub.ai/rustok/skills/wallet
Other files · claw.json
Security positives
文档清晰说明安全边界和保护机制
sign_message被明确拒绝而非仅gated
资金转移需要独立控制台审批
Autonomous模式需人类确认
完整的安全警告和免责声明
使用摘要固定镜像而非tag确保内容一致性
工具capability分层设计合理