bozo-jiaodu 安全扫描报告 — 低风险 | ClawSafe

20 /100

bozo-jiaodu

AI图片摄像机角度提示词转换助手。将创意描述转换为摄像机角度提示词，输出以<sks>开头的标准格式。

Legitimate camera angle prompt converter with documented shell script API integration; no malicious behavior detected, only minor documentation quality issues.

技能名称bozo-jiaodu

分析耗时44.1s

引擎pi

✓

可以安装

Approve for use. Consider removing placeholder API key strings from documentation and explicitly declaring network:WRITE and shell:WRITE permissions in SKILL.md for transparency.

安全发现 2 项

严重性	安全发现	位置
低危	Undeclared shell and network execution permissions 文档欺骗 SKILL.md's metadata declares no permissions, but the skill actually requires shell:WRITE (bash scripts) and network:WRITE (curl to api.bizyair.cn) to function. The permission grants exist only in .claude/settings.local.json, not in SKILL.md itself. This creates a doc-to-permission mismatch for users reviewing SKILL.md alone. `Skill declares 'description: AI图片摄像机角度提示词转换助手' with no declared permissions` → Add explicit permission declarations to SKILL.md frontmatter: allowed-tools should include Bash (→shell:WRITE) and WebFetch equivalent (→network:WRITE) since the API scripts require both.	`SKILL.md:1`
低危	Placeholder credential strings in documentation 文档欺骗 SKILL.md:213 and scripts/README.md:141 contain example API key strings 'your_actual_api_key_here' and 'your_api_key_here' that could be mistaken for instructions to paste real credentials. These are placeholder values, not real keys, but they appear in export commands in documentation. `export BIZYAIR_API_KEY="your_actual_api_key_here"` → Use clearly labeled placeholder syntax like 'YOUR_API_KEY_HERE' or '$BIZYAIR_API_KEY' with comments explaining these are placeholders.	`SKILL.md:213`

资源类型	声明权限	推断权限	状态	证据
文件系统	`NONE`	`READ`	✓ 一致	SKILL.md:read-only prompt transformation, no file writes
网络访问	`NONE`	`WRITE`	✗ 越权	scripts/create_angle_task.sh:73-77 — curl POST to api.bizyair.cn
命令执行	`NONE`	`WRITE`	✗ 越权	scripts/create_angle_task.sh — executes bash scripts; scripts/get_task_outputs.s…
环境变量	`NONE`	`READ`	✓ 一致	scripts/check for $BIZYAIR_API_KEY env var — legitimate use for API auth, not ex…
技能调用	`NONE`	`NONE`	—	No cross-skill invocation found
剪贴板	`NONE`	`NONE`	—	Not used
浏览器	`NONE`	`NONE`	—	Not used
数据库	`NONE`	`NONE`	—	Not used

2 高危 9 项发现

🔑

高危 API 密钥疑似硬编码凭证

API_KEY="your_actual_api_key_here"

SKILL.md:213

🔑

高危 API 密钥疑似硬编码凭证

API_KEY="your_api_key_here"

scripts/README.md:141

🔗

中危外部 URL 外部 URL

https://storage.bizyair.cn/creations/20260318/4ac1e8ed-58a8-4b14-bd9d-6c536875bab5_649c12a5106e5bdd4d59e974671a1944_Comf...

.claude/settings.local.json:5

🔗

中危外部 URL 外部 URL

https://storage.bizyair.cn/outputs/xxx.png

SKILL.md:287

🔗

中危外部 URL 外部 URL

https://api.bizyair.cn/w/v1/webapp/task/openapi/create

SKILL.md:298

🔗

中危外部 URL 外部 URL

https://api.bizyair.cn/w/v1/webapp/task/openapi/outputs?requestId=

SKILL.md:313

🔗

中危外部 URL 外部 URL

https://storage.bizyair.cn/inputs/20260108/JYLqRJcgPJ1GcOrzRfXJ8qsXnia1aWSB.png

scripts/README.md:81

🔗

中危外部 URL 外部 URL

https://storage.bizyair.cn/inputs/20260108/...

scripts/README.md:88

🔗

中危外部 URL 外部 URL

https://api.bizyair.cn/w/v1/webapp/task/openapi/outputs?requestId=$

scripts/get_task_outputs.sh:47

目录结构

6 文件 · 34.9 KB · 1057 行

Markdown 2f · 549L Shell 2f · 282L JSON 2f · 226L

├─ ▾ 📁 .claude

│ └─ 📋 settings.local.json JSON 8L · 370 B

├─ ▾ 📁 evals

│ └─ 📋 evals.json JSON 218L · 8.8 KB

├─ ▾ 📁 scripts

│ ├─ 🔧 create_angle_task.sh Shell 147L · 4.9 KB

│ ├─ 🔧 get_task_outputs.sh Shell 135L · 4.6 KB

│ └─ 📝 README.md Markdown 173L · 4.0 KB

└─ 📝 SKILL.md Markdown 376L · 12.2 KB

安全亮点

✓ No base64-encoded execution, eval(), or obfuscated code — all scripts are plain, readable bash

✓ No credential harvesting — only reads BIZYAIR_API_KEY for API auth, does not iterate environment variables or access sensitive paths like ~/.ssh or ~/.aws

✓ No data exfiltration — network requests are confined to the legitimate BizyAir API endpoint (api.bizyair.cn), consistent with the documented image processing feature

✓ No persistence mechanisms — no cron jobs, startup hooks, or backdoor installation found

✓ API script functionality is described in SKILL.md (BizyAir API section), providing partial documentation

✓ No remote script download — scripts are bundled locally, no curl|bash or wget|sh patterns

✓ All external URLs point to storage.bizyair.cn and api.bizyair.cn (consistent with BizyAir image processing service)