中文 EN
Start Review
Skill Trust Decision

浙江供应商资质业绩核验

硬编码IP地址110.40.221.75与声明的HTTPS数据接口不符，存在文档-行为差异；凭据存储机制有数据外泄风险

Install decision first Source: ClawHub Scanned: 15 days ago
Files 4
Artifacts 5
Violations 2
Findings 4
Most direct threat evidence
01
用户执行node scripts/run.mjs查询供应商 Entry · SKILL.md
02
脚本将请求发送至硬编码IP 110.40.221.75 Escalation · scripts/run.mjs
03
install_id和cookies被持久化到~/.odf/combo-supplier-profile.json Impact · scripts/run.mjs

Why this conclusion was reached

3/4 dimensions flagged
Block
Declared vs actual capability

2 undeclared or violating capabilities were inferred.

Block
Hidden execution and egress

1 high-risk artifacts or egress signals were extracted.

Block
Attack chain and severe findings

The report includes 3 attack-chain steps and 2 severe findings.

Review
Dependencies and supply chain hygiene

Dependency information is incomplete, so supply-chain confidence stays limited.

Attack Chain

01
用户执行node scripts/run.mjs查询供应商

Entry · SKILL.md:29

02
脚本将请求发送至硬编码IP 110.40.221.75

Escalation · scripts/run.mjs:6

03
install_id和cookies被持久化到~/.odf/combo-supplier-profile.json

Impact · scripts/run.mjs:38

What drove the risk score up

文档-行为差异 +20

SKILL.md声明HTTPS数据接口，实际硬编码IP 110.40.221.75

凭据持久化 +15

将install_id和cookies写入~/.odf/combo-supplier-profile.json

未声明的网络行为 +10

代码访问裸IP而非域名，IP直连绕过DNS安全机制

Most important evidence

High Doc Mismatch

硬编码IP地址与声明不符

SKILL.md声明使用'HTTPS数据接口地址'，但代码中BASE变量硬编码为IP 110.40.221.75:13479而非域名，这是典型的C2通信特征

scripts/run.mjs:6
使用标准域名而非裸IP；要求开发者澄清IP来源和用途
High Credential Theft

凭据持久化存储存在外泄风险

代码将install_id、cookies写入~/.odf/combo-supplier-profile.json，敏感凭据以明文JSON存储在用户主目录

scripts/run.mjs:37-38
评估凭据存储必要性；如非必要应删除持久化逻辑
Medium Obfuscation

代码中存在动态注入占位符

代码注释显示LICENSE和PAY_URL为'构建时注入'，存在供应链注入风险

scripts/run.mjs:8,11
警惕动态注入的凭据或指令；检查构建流程安全性
Low Supply Chain

无第三方依赖锁定

纯Node.js内置模块实现，无外部依赖但也意味着无版本安全更新机制

scripts/run.mjs:1
继续使用内置模块，减少供应链风险

Declared capability vs actual capability

Network Block
Declared HTTPS数据接口
→
Inferred 裸IP直连
scripts/run.mjs:6 BASE变量硬编码IP而非域名
Filesystem Pass
Declared ~/.odf/combo-supplier-profile.json
→
Inferred WRITE
scripts/run.mjs:12-13 凭据读写
Environment Block
Declared NONE
→
Inferred READ
scripts/run.mjs:15 API_KEY从环境变量/文件读取

Suspicious artifacts and egress

High IP Address
110.40.221.75

scripts/run.mjs:7

Medium External URL
https://110.40.221.75:13479/factory

scripts/run.mjs:7

Medium External URL
https://skillpay.alipay.com/shelf/product?productId=P0806000206850001&merchantCode=tokendidi

scripts/run.mjs:10

Medium External URL
https://clawhub.ai/user/chenqg618

skill-card.md:9

Medium External URL
https://clawhub.ai/chenqg618/skills/zj-supplier-profile

skill-card.md:35

Dependencies and supply chain

There are no structured dependency warnings.

File composition

4 files · 217 lines
JavaScript 1 files · 103 linesMarkdown 2 files · 98 linesJSON 1 files · 16 lines
Files of concern · 2
scripts/run.mjs JavaScript · 103 lines
硬编码IP地址与声明不符 · 凭据持久化存储存在外泄风险 · 代码中存在动态注入占位符 · 无第三方依赖锁定 · 110.40.221.75 · https://110.40.221.75:13479/factory · https://skillpay.alipay.com/shelf/product?productId=P0806000206850001&merchantCode=tokendidi
skill-card.md Markdown · 53 lines
https://clawhub.ai/user/chenqg618 · https://clawhub.ai/chenqg618/skills/zj-supplier-profile
Other files · SKILL.md · manifest.json

Security positives

使用HTTPS而非HTTP传输
402/409错误处理得当，未转达远端指令
无命令执行、无base64解码等典型攻击模式