中文 EN

Scan Report

Scan New Files

✓ Low Risk — Risk Score 10/100
Last scan:22 hr ago Rescan
10 /100
lobster-agent
服务器监控Agent，自动采集系统指标并上报到Coze大龙虾平台，支持CPU/内存/磁盘/网络监控、告警推送和自动节点注册
This is a documentation-only skill package describing a legitimate server monitoring agent. The SKILL.md declares all major capabilities (network reporting, systemd service, root privileges) but contains no implementation code to verify actual behavior.
Skill Namelobster-agent
Duration38.8s
Enginepi
✓
Safe to install
Acceptable for use with low risk profile. However, since no implementation code exists in this package, verify that the actual lobster-agent code matches the documented behavior before deployment. Request source code review if available.

Findings 2 items

Severity Finding Location
Low
Implementation not included Doc Mismatch
This skill package only contains SKILL.md documentation. No Python scripts or implementation files exist in the package. The actual lobster-agent code is not provided for security review.
All content is documentation only
→ Request the actual implementation code before final security approval
 SKILL.md:1
Low
External platform data reporting (declared) Data Exfil
The skill reports system metrics (CPU, memory, disk, network) to external Coze platform. This is the stated purpose of the skill.
数据上报 – 心跳包、监控数据、告警数据分别上报到对应数据集
→ Verify data collection scope matches your organization's data policies
 SKILL.md:19
ResourceDeclaredInferredStatusEvidence
Filesystem WRITE WRITE ✓ Aligned SKILL.md describes creating /opt/lobster-agent, /var/log/lobster-agent directori…
Network WRITE WRITE ✓ Aligned SKILL.md line 19: Reports to https://api.coze.cn
Shell WRITE WRITE ✓ Aligned SKILL.md describes creating /usr/local/bin/lobster command and systemd service
Environment NONE NONE — No environment access described
Skill Invoke NONE NONE — No skill invocation described
3 findings
🔗
Medium External URL 外部 URL
https://api.coze.cn）
SKILL.md:19
🔗
Medium External URL 外部 URL
https://www.coze.cn/docs/developer-docs/api
SKILL.md:137
🔗
Medium External URL 外部 URL
https://coze.cn/s/7618478715609055278
SKILL.md:138

File Tree

1 files · 4.3 KB · 138 lines
Markdown 1f · 138L
└─ 📝 SKILL.md Markdown 138L · 4.3 KB

Security Positives

✓ All major capabilities are documented in SKILL.md
✓ No obfuscation or base64-encoded content found
✓ No credential harvesting beyond monitoring requirements
✓ No reverse shell or C2 indicators
✓ External data transfer is declared as the core purpose
✓ Dependencies (requests, psutil) are reasonable for monitoring