Skill Trust Decision
dlazy-website-to-video
纯文档型技能，声明清晰透明度高，敏感操作均已声明，外部连接为标准 SaaS 模式，主要风险来自第三方 npm 依赖的供应链问题。
Why this conclusion was reached
0/4 dimensions flagged Pass
Declared vs actual capability
Declared resources and inferred behavior are broadly aligned.
Review
Hidden execution and egress
6 lower-risk artifacts were extracted and still need context.
Pass
Attack chain and severe findings
There is no explicit malicious chain in the report.
Pass
Dependencies and supply chain hygiene
Dependencies are present but no obvious high-risk issue stands out.
What drove the risk score up
纯文档无代码审查 +10
skill 仅含 Markdown 文档，无 scripts/ 代码文件，无法验证实际执行行为与文档一致性
npm 包供应链风险 +5
@dlazy/cli 依赖第三方 npm 包，虽指定版本但未锁定源码 hash
动态代码执行(npx) +5
npx 每次可能下载最新包，存在版本漂移风险
Most important evidence
Low Supply Chain
npm 包依赖未做源码完整性校验
@dlazy/cli 包虽指定版本 1.2.3，但文档未提供源码 hash 或 SRI 校验值，无法确保包内容未被篡改。
SKILL.md:18 建议添加 integrity 字段或指向可验证的源码仓库 commit hash
Low Doc Mismatch
文档-行为一致性无法验证
该 skill 无 scripts/ 代码文件，纯文档描述声称'不会越权访问网络或文件系统'，但实际行为完全依赖外部 CLI 无法直接验证。
SKILL.md:72 建议提供沙箱测试用例或 CLI 源码审计报告链接
Info Sensitive Access
API Key 存储在本地配置文件
dLazy CLI 将 API key 存储在 ~/.dlazy/config.json，文件权限虽限制为当前用户但仍为明文存储。
SKILL.md:27 这是行业标准做法，可接受；建议用户勿在共享/公共机器上使用
Declared capability vs actual capability
Network Pass
Declared READ
→ Inferred READ
SKILL.md:api.dlazy.com, files.dlazy.com Shell Pass
Declared WRITE
→ Inferred WRITE
SKILL.md:dlazy chat 命令执行 Filesystem Pass
Declared READ
→ Inferred READ
SKILL.md:--files 参数仅上传特定文件 Environment Pass
Declared READ
→ Inferred READ
SKILL.md:DLAZY_API_KEY 环境变量 Suspicious artifacts and egress
Medium External URL
https://www.npmjs.com/package/@dlazy/cli SKILL-cn.md:5
Medium External URL
https://dlazy.com SKILL-cn.md:46
Medium External URL
https://dlazy.com/dashboard/organization/api-key SKILL-cn.md:47
Medium External URL
https://dlazy.com/dashboard/organization/settings?tab=credits SKILL-cn.md:126
Medium External URL
https://clawhub.ai/user/dlazyai skill-card.md:9
Medium External URL
https://clawhub.ai/dlazyai/skills/dlazy-website-to-video skill-card.md:39
Dependencies and supply chain
| Package | Version | Source | Known vuln | Notes |
|---|---|---|---|---|
| @dlazy/cli | 1.2.3 | npm | No | 指定版本但无 hash 校验，源码托管于 GitHub 需人工审计 |
File composition
3 files · 322 lines
Markdown 3 files · 322 lines
Files of concern · 3
SKILL.md npm 包依赖未做源码完整性校验 · 文档-行为一致性无法验证 · API Key 存储在本地配置文件
SKILL-cn.md https://www.npmjs.com/package/@dlazy/cli · https://dlazy.com · https://dlazy.com/dashboard/organization/api-key · https://dlazy.com/dashboard/organization/settings?tab=credits
skill-card.md https://clawhub.ai/user/dlazyai · https://clawhub.ai/dlazyai/skills/dlazy-website-to-video
Security positives
文档透明度极高，声明了所有敏感操作（网络连接、文件上传、凭证存储）
skill-card.md 明确列出了已知风险和缓解措施
使用标准 SaaS 模式，无未声明的本地持久化行为
支持 npx 非持久化执行方式
提供完整的错误码表和用户引导
API Key 轮换/吊销机制明确
无隐藏功能，无代码混淆，无可疑高危指标