中文 EN
Start Review
Skill Trust Decision

smyx-aggressive-behavior-detection-analysis

畜禽争斗行为识别技能，包含未激活的 subprocess 远程执行代码（已注释）和环境变量读取逻辑，声明-行为存在偏差但无直接恶意证据。

Install decision first Source: ClawHub Scanned: 25 days ago
Files 29
Artifacts 10
Violations 4
Findings 5
Most direct threat evidence
01
用户安装技能，读取 SKILL.md 了解功能 Entry · SKILL.md
02
技能读取环境变量 OPENCLAW_SENDER_OPEN_ID 获取身份 Escalation · skills/smyx_common/scripts/config.py
03
技能创建本地 SQLite 数据库存储 token Escalation · skills/smyx_common/scripts/dao.py

Why this conclusion was reached

2/4 dimensions flagged
Block
Declared vs actual capability

4 undeclared or violating capabilities were inferred.

Review
Hidden execution and egress

10 lower-risk artifacts were extracted and still need context.

Block
Attack chain and severe findings

The report includes 4 attack-chain steps and 0 severe findings.

Pass
Dependencies and supply chain hygiene

Dependencies are present but no obvious high-risk issue stands out.

Attack Chain

01
用户安装技能，读取 SKILL.md 了解功能

Entry · SKILL.md:1

02
技能读取环境变量 OPENCLAW_SENDER_OPEN_ID 获取身份

Escalation · skills/smyx_common/scripts/config.py:77

03
技能创建本地 SQLite 数据库存储 token

Escalation · skills/smyx_common/scripts/dao.py:88

04
通过 HTTP POST 上传视频文件到 lifeemergence.com API

Impact · skills/smyx_analysis/scripts/skill.py:85

What drove the risk score up

未激活的远程执行代码 +20

skills/smyx_common/scripts/skill.py 包含已注释的 subprocess.run(openclaw agent) 调用，虽未激活但代码存在

环境变量遍历读取 +15

config.py 读取 OPENCLAW_SENDER_OPEN_ID, OPENCLAW_SENDER_USERNAME, FEISHU_OPEN_ID 等环境变量

自动用户创建机制 +10

OpenIdUtil 自动生成 User_ 前缀用户并通过 /sys/phoneLogin API 注册

Most important evidence

Medium RCE

已注释的 subprocess 远程执行代码

skills/smyx_common/scripts/skill.py 中存在已注释的 subprocess.run(['openclaw', 'agent', ...]) 调用，可执行外部命令。虽当前未激活，但代码存在即构成风险。

skills/smyx_common/scripts/skill.py:37
删除此类危险代码，或在 SKILL.md 中明确声明此功能的存在和用途
Medium Credential Theft

环境变量敏感信息读取

config.py 读取 OPENCLAW_SENDER_OPEN_ID、OPENCLAW_SENDER_USERNAME、FEISHU_OPEN_ID 等环境变量，用于身份解析。未在 SKILL.md 中声明。

skills/smyx_common/scripts/config.py:77
在 SKILL.md 的 declared permissions 中声明 environment:READ
Low Sensitive Access

本地 SQLite 数据库存储用户凭证

dao.py 在工作区 data 目录创建 smyx-common-claw.db 数据库，存储 username、token、open_token 等敏感信息。

skills/smyx_common/scripts/dao.py:88
确保数据库文件路径隔离，不泄露到工作区外部
Low Doc Mismatch

网络能力声明与实际不符

SKILL.md 声明 'analysis requests through server-side API'，未明确说明文件上传（HTTP POST with multipart/form-data）和自动注册用户的网络写操作。

SKILL.md:1
补充声明文件上传和网络写操作能力
Low Priv Escalation

自动用户创建机制

OpenIdUtil 在 resolve_current_open_id() 中自动通过 /sys/phoneLogin API 创建用户，可能绕过身份验证流程。

skills/smyx_common/scripts/util.py:298
限制自动注册仅在首次调用时执行，添加开关控制

Declared capability vs actual capability

Filesystem Pass
Declared READ
→
Inferred READ
SKILL.md:脚本仅读取视频文件，无写操作
Network Block
Declared READ
→
Inferred WRITE
skills/smyx_common/scripts/util.py:298 通过 HTTP POST 上传文件到 API
Shell Block
Declared NONE
→
Inferred WRITE
skills/smyx_common/scripts/skill.py:37 存在已注释的 subprocess.run(openclaw agent)
Environment Block
Declared NONE
→
Inferred READ
skills/smyx_common/scripts/config.py:77-82 读取 OPENCLAW_SENDER_OPEN_ID 等变量
Database Block
Declared NONE
→
Inferred WRITE
skills/smyx_common/scripts/dao.py 本地 SQLite 存储用户凭证

Suspicious artifacts and egress

Medium External URL
https://lifeemergence.com/sample.html

SKILL.md:29

Medium External URL
http://192.168.1.234:9601/smyx-open-api

skills/smyx_common/scripts/config-dev.yaml:2

Medium External URL
http://192.168.1.234:4100

skills/smyx_common/scripts/config-dev.yaml:3

Medium External URL
http://192.168.1.234:7070/jeecg-boot-xzgz

skills/smyx_common/scripts/config-dev.yaml:4

Medium External URL
https://livemonitortest.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config-test.yaml:2

Medium External URL
http://livemonitortest.lifeemergence.com

skills/smyx_common/scripts/config-test.yaml:3

Medium External URL
https://healthtest.lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config-test.yaml:4

Medium External URL
https://lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config.yaml:4

Medium External URL
https://open.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config.yaml:5

Medium External URL
http://livemonitor.lifeemergence.com

skills/smyx_common/scripts/config.yaml:6

Dependencies and supply chain

PackageVersionSourceKnown vulnNotes
pydash 8.0.6 pip No 版本已锁定
SQLAlchemy 2.0.46 pip No 版本已锁定
PyYAML 6.0.3 pip No 版本已锁定

File composition

29 files · 2698 lines
Python 18 files · 2363 linesMarkdown 3 files · 300 linesYAML 6 files · 29 linesText 2 files · 6 lines
Files of concern · 5
skills/smyx_common/scripts/util.py Python · 718 lines
自动用户创建机制
skills/smyx_common/scripts/config.py Python · 399 lines
环境变量敏感信息读取
skills/smyx_common/scripts/dao.py Python · 499 lines
本地 SQLite 数据库存储用户凭证
SKILL.md Markdown · 261 lines
网络能力声明与实际不符 · https://lifeemergence.com/sample.html
skills/smyx_common/scripts/skill.py Python · 85 lines
已注释的 subprocess 远程执行代码
Other files · skill.py · smyx_analysis.py · smyx_aggressive_behavior_detection_analysis.py · api_service.py · api_service.py · config.py +1

Security positives

代码结构清晰，依赖版本已锁定（pydash==8.0.6, SQLAlchemy==2.0.46, PyYAML==6.0.3）
网络请求仅指向预定义的 lifeemergence.com 域名，无外部 IP 或可疑 C2 通信
subprocess 代码处于注释状态，当前无法执行
数据库路径强制重定向到工作区 data 目录，不会污染外部路径