Skill Trust Decision

smyx-sneeze-cough-detection-analysis

Name: smyx-sneeze-cough-detection-analysis Trust Review Report
Item: smyx-sneeze-cough-detection-analysis
Rating: 55
Author: ClawSafe

技能声称仅用于宠物打喷嚏/咳嗽检测，但实际包含未声明的数据库操作、用户自动注册/登录和令牌管理功能，构成明显的声明-行为差异。

Install decision first Source: ClawHub Scanned: 15 hr ago

Files 30

Artifacts 12

Violations 4

Findings 4

Most direct threat evidence

用户以为这是纯检测工具，安装后未意识到用户管理系统存在 Entry · SKILL.md

代码读取环境变量获取用户身份标识 Escalation · skills/smyx_common/scripts/config.py

自动创建默认用户并通过API注册 Escalation · skills/smyx_common/scripts/util.py

Why this conclusion was reached

2/4 dimensions flagged

Block

Declared vs actual capability

4 undeclared or violating capabilities were inferred.

Review

Hidden execution and egress

12 lower-risk artifacts were extracted and still need context.

Block

Attack chain and severe findings

The report includes 4 attack-chain steps and 2 severe findings.

Pass

Dependencies and supply chain hygiene

Dependencies are present but no obvious high-risk issue stands out.

Attack Chain

用户以为这是纯检测工具，安装后未意识到用户管理系统存在

Entry · SKILL.md:1

代码读取环境变量获取用户身份标识

Escalation · skills/smyx_common/scripts/config.py:96

自动创建默认用户并通过API注册

Escalation · skills/smyx_common/scripts/util.py:396

用户token和open_token存储到本地SQLite数据库

Impact · skills/smyx_common/scripts/dao.py:182

What drove the risk score up

声明-行为差异 +25

SKILL.md仅声明requests依赖，实际使用SQLAlchemy/pydash并实现完整用户管理系统

影子功能-自动用户注册 +20

OpenIdUtil._get_or_create_user()调用/sys/phoneLogin自动注册用户

敏感数据本地存储 +15

User模型存储token/open_token到本地SQLite数据库

环境变量身份收集 +10

config.py读取OPENCLAW_SENDER_OPEN_ID等环境变量

Most important evidence

High Doc Mismatch

声明能力与实际实现严重不符

SKILL.md声称只需requests>=2.28.0依赖，实际使用pydash、SQLAlchemy、PyYAML等复杂框架，并实现完整的用户注册、登录和令牌管理系统

skills/smyx_analysis/requirements.txt:1

在SKILL.md中明确声明所有依赖和功能范围

High Sensitive Access

未声明的环境变量读取

从环境变量读取OPENCLAW_SENDER_OPEN_ID、OPENCLAW_SENDER_USERNAME、FEISHU_OPEN_ID等身份标识，用于自动关联用户身份

skills/smyx_common/scripts/config.py:96

在SKILL.md中声明所有环境变量的使用

Medium Credential Theft

用户凭证本地存储

User模型包含token和open_token字段，存储到本地SQLite数据库，未在文档中声明

skills/smyx_common/scripts/dao.py:182

如非必要，移除本地凭证存储功能

Medium Doc Mismatch

自动用户创建功能

当检测不到open_id时，代码自动创建User_开头的随机用户名并调用远程API完成注册，完全未在文档中说明

skills/smyx_common/scripts/util.py:396

删除自动用户创建功能或明确声明此行为

Declared capability vs actual capability

Filesystem Block

Declared NONE

→

Inferred WRITE

skills/smyx_common/scripts/dao.py:72 创建本地SQLite数据库

Network Block

Declared READ

→

Inferred WRITE

skills/smyx_common/scripts/util.py:396 调用/sys/phoneLogin注册用户

Environment Block

Declared NONE

→

Inferred READ

skills/smyx_common/scripts/config.py:96 读取OPENCLAW_SENDER_OPEN_ID

Database Block

Declared NONE

→

Inferred WRITE

skills/smyx_common/scripts/dao.py:49 完整CRUD操作

Suspicious artifacts and egress

Medium External URL

https://lifeemergence.com/sample.html

SKILL.md:34

Medium External URL

https://clawhub.ai/user/18072937735

skill-card.md:9

Medium External URL

https://clawhub.ai/18072937735/skills/smyx-sneeze-cough-detection-analysis

skill-card.md:43

Medium External URL

http://192.168.1.234:9601/smyx-open-api

skills/smyx_common/scripts/config-dev.yaml:2

Medium External URL

http://192.168.1.234:4100

skills/smyx_common/scripts/config-dev.yaml:3

Medium External URL

http://192.168.1.234:7070/jeecg-boot-xzgz

skills/smyx_common/scripts/config-dev.yaml:4

Medium External URL

https://livemonitortest.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config-test.yaml:2

Medium External URL

http://livemonitortest.lifeemergence.com

skills/smyx_common/scripts/config-test.yaml:3

Medium External URL

https://healthtest.lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config-test.yaml:4

Medium External URL

https://lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config.yaml:4

Medium External URL

https://open.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config.yaml:5

Medium External URL

http://livemonitor.lifeemergence.com

skills/smyx_common/scripts/config.yaml:6

Dependencies and supply chain

Package	Version	Source	Known vuln	Notes
requests	`未声明（依赖文档缺失）`	pip	No	主代码依赖但未在requirements.txt中
pydash	`8.0.6`	pip	No	版本已锁定
SQLAlchemy	`2.0.46`	pip	No	版本已锁定
PyYAML	`6.0.3`	pip	No	版本已锁定

File composition

30 files · 2712 lines

Python 18 files · 2360 linesMarkdown 4 files · 317 linesYAML 6 files · 29 linesText 2 files · 6 lines

Files of concern · 5

skills/smyx_common/scripts/util.py Python · 718 lines

自动用户创建功能

skills/smyx_common/scripts/config.py Python · 399 lines

未声明的环境变量读取

skills/smyx_common/scripts/dao.py Python · 499 lines

用户凭证本地存储

SKILL.md Markdown · 214 lines

https://lifeemergence.com/sample.html

skill-card.md Markdown · 64 lines

https://clawhub.ai/user/18072937735 · https://clawhub.ai/18072937735/skills/smyx-sneeze-cough-detection-analysis

Other files · skill.py · smyx_analysis.py · smyx_sneeze_cough_detection_analysis.py · api_service.py · skill.py · api_service.py +1

30 files · 110.1 KB · 2712 lines

Python 18f · 2360LMarkdown 4f · 317LYAML 6f · 29LText 2f · 6L

├─ ▾ 📁 references

│ └─ 📝 api_doc.md Markdown 20L · 676 B

├─ ▾ 📁 scripts

│ ├─ 🐍 __init__.py Python 1L · 54 B

│ ├─ 🐍 config.py Python 24L · 677 B

│ ├─ 📋 config.yaml YAML 1L · 3 B

│ ├─ 🐍 skill.py Python 23L · 577 B

│ └─ 🐍 smyx_sneeze_cough_detection_analysis.py Python 99L · 3.4 KB

├─ ▾ 📁 skills

│ ├─ ▾ 📁 smyx_analysis

│ │ ├─ ▾ 📁 references

│ │ │ └─ 📝 api_doc.md Markdown 19L · 427 B

│ │ ├─ ▾ 📁 scripts

│ │ │ ├─ 🐍 __init__.py Python 0 B

│ │ │ ├─ 🐍 api_service.py Python 40L · 1.5 KB

│ │ │ ├─ 🐍 config.py Python 39L · 1003 B

│ │ │ ├─ 📋 config.yaml YAML 1L · 3 B

│ │ │ ├─ 🐍 skill.py Python 175L · 6.4 KB

│ │ │ └─ 🐍 smyx_analysis.py Python 115L · 3.7 KB

│ │ ├─ 🐍 __init__.py Python 0 B

│ │ └─ 📄 requirements.txt Text 3L · 45 B

│ └─ ▾ 📁 smyx_common

│ ├─ ▾ 📁 scripts

│ │ ├─ 🐍 __init__.py Python 9L · 177 B

│ │ ├─ 🐍 api_service.py Python 101L · 2.6 KB

│ │ ├─ 🐍 base.py Python 33L · 469 B

│ │ ├─ 📋 config-dev.yaml YAML 6L · 214 B

│ │ ├─ 📋 config-prod.yaml YAML 0 B

│ │ ├─ 📋 config-test.yaml YAML 6L · 256 B

│ │ ├─ 🐍 config.py Python 399L · 23.8 KB

│ │ ├─ 📋 config.yaml YAML 15L · 472 B

│ │ ├─ 🐍 dao.py Python 499L · 17.8 KB

│ │ ├─ 🐍 skill.py Python 85L · 2.4 KB

│ │ └─ 🐍 util.py Python 718L · 28.1 KB

│ ├─ 🐍 __init__.py Python 0 B

│ └─ 📄 requirements.txt Text 3L · 47 B

├─ 📝 SKILL.md Markdown 214L · 12.8 KB

└─ 📝 skill-card.md Markdown 64L · 2.6 KB

Security positives

代码结构清晰，使用标准ORM框架

依赖版本已锁定（pydash==8.0.6, SQLAlchemy==2.0.46）

网络请求使用标准requests库而非subprocess

配置文件与代码逻辑分离良好

数据库路径通过AgentContextUtil正确隔离到工作区data目录