Skill Trust Decision
浙江供应商资质业绩核验
硬编码IP地址110.40.221.75与声明的HTTPS数据接口不符，存在文档-行为差异；凭据存储机制有数据外泄风险
Most direct threat evidence
01
用户执行node scripts/run.mjs查询供应商 Entry · SKILL.md
02
脚本将请求发送至硬编码IP 110.40.221.75 Escalation · scripts/run.mjs
03
install_id和cookies被持久化到~/.odf/combo-supplier-profile.json Impact · scripts/run.mjs
Why this conclusion was reached
3/4 dimensions flagged Block
Declared vs actual capability
2 undeclared or violating capabilities were inferred.
Block
Hidden execution and egress
1 high-risk artifacts or egress signals were extracted.
Block
Attack chain and severe findings
The report includes 3 attack-chain steps and 2 severe findings.
Review
Dependencies and supply chain hygiene
Dependency information is incomplete, so supply-chain confidence stays limited.
Attack Chain
01
用户执行node scripts/run.mjs查询供应商
Entry · SKILL.md:29
02
脚本将请求发送至硬编码IP 110.40.221.75
Escalation · scripts/run.mjs:6
03
install_id和cookies被持久化到~/.odf/combo-supplier-profile.json
Impact · scripts/run.mjs:38
What drove the risk score up
文档-行为差异 +20
SKILL.md声明HTTPS数据接口，实际硬编码IP 110.40.221.75
凭据持久化 +15
将install_id和cookies写入~/.odf/combo-supplier-profile.json
未声明的网络行为 +10
代码访问裸IP而非域名，IP直连绕过DNS安全机制
Most important evidence
High Doc Mismatch
硬编码IP地址与声明不符
SKILL.md声明使用'HTTPS数据接口地址'，但代码中BASE变量硬编码为IP 110.40.221.75:13479而非域名，这是典型的C2通信特征
scripts/run.mjs:6 使用标准域名而非裸IP；要求开发者澄清IP来源和用途
High Credential Theft
凭据持久化存储存在外泄风险
代码将install_id、cookies写入~/.odf/combo-supplier-profile.json，敏感凭据以明文JSON存储在用户主目录
scripts/run.mjs:37-38 评估凭据存储必要性；如非必要应删除持久化逻辑
Medium Obfuscation
代码中存在动态注入占位符
代码注释显示LICENSE和PAY_URL为'构建时注入'，存在供应链注入风险
scripts/run.mjs:8,11 警惕动态注入的凭据或指令；检查构建流程安全性
Low Supply Chain
无第三方依赖锁定
纯Node.js内置模块实现，无外部依赖但也意味着无版本安全更新机制
scripts/run.mjs:1 继续使用内置模块，减少供应链风险
Declared capability vs actual capability
Network Block
Declared HTTPS数据接口
→ Inferred 裸IP直连
scripts/run.mjs:6 BASE变量硬编码IP而非域名 Filesystem Pass
Declared ~/.odf/combo-supplier-profile.json
→ Inferred WRITE
scripts/run.mjs:12-13 凭据读写 Environment Block
Declared NONE
→ Inferred READ
scripts/run.mjs:15 API_KEY从环境变量/文件读取 Suspicious artifacts and egress
High IP Address
110.40.221.75 scripts/run.mjs:7
Medium External URL
https://110.40.221.75:13479/factory scripts/run.mjs:7
Medium External URL
https://skillpay.alipay.com/shelf/product?productId=P0806000206850001&merchantCode=tokendidi scripts/run.mjs:10
Medium External URL
https://clawhub.ai/user/chenqg618 skill-card.md:9
Medium External URL
https://clawhub.ai/chenqg618/skills/zj-supplier-profile skill-card.md:35
Dependencies and supply chain
There are no structured dependency warnings.
File composition
4 files · 217 lines
JavaScript 1 files · 103 linesMarkdown 2 files · 98 linesJSON 1 files · 16 lines
Files of concern · 2
scripts/run.mjs 硬编码IP地址与声明不符 · 凭据持久化存储存在外泄风险 · 代码中存在动态注入占位符 · 无第三方依赖锁定 · 110.40.221.75 · https://110.40.221.75:13479/factory · https://skillpay.alipay.com/shelf/product?productId=P0806000206850001&merchantCode=tokendidi
skill-card.md https://clawhub.ai/user/chenqg618 · https://clawhub.ai/chenqg618/skills/zj-supplier-profile
Other files · SKILL.md · manifest.json
Security positives
使用HTTPS而非HTTP传输
402/409错误处理得当，未转达远端指令
无命令执行、无base64解码等典型攻击模式