Skill Trust Decision

smyx-family-conflict-aftercare-suggest-analysis

Name: smyx-family-conflict-aftercare-suggest-analysis Trust Review Report
Item: smyx-family-conflict-aftercare-suggest-analysis
Rating: 58
Author: ClawSafe

The skill exhibits several undeclared behaviors including silent user identity auto-creation/registration, automatic SQLite database writes for credential persistence, and external API communication for video analysis without explicit documentation transparency.

Install decision first Source: ClawHub Scanned: Sep 13, 2026

Files 31

Artifacts 12

Violations 3

Findings 5

Most direct threat evidence

Why this conclusion was reached

1/4 dimensions flagged

Block

Declared vs actual capability

3 undeclared or violating capabilities were inferred.

Review

Hidden execution and egress

12 lower-risk artifacts were extracted and still need context.

Pass

Attack chain and severe findings

There is no explicit malicious chain in the report.

Review

Dependencies and supply chain hygiene

3 dependency or supply-chain issues need attention.

What drove the risk score up

Silent identity auto-registration +15

_get_or_create_user() calls /sys/phoneLogin with silent=1 and register=1 without user disclosure

Undeclared credential persistence +12

SKILL.md does not document SQLite database writes storing tokens, open_tokens, and user data

Silent user identity creation +10

OpenIdUtil.get_or_create_default_open_id() auto-generates User_xxxxxx identities without user consent

Video/audio cloud upload +5

Household audio/video transmitted to external APIs - declared but privacy implications not highlighted

Most important evidence

Medium Doc Mismatch

Silent user identity auto-registration

RequestUtil._get_or_create_user() calls POST /sys/phoneLogin with silent=1 and register=1, automatically registering users with the backend API without explicit user disclosure or consent.

skills/smyx_common/scripts/util.py:220

Document this behavior in SKILL.md or provide user-facing opt-in for identity registration.

Medium Sensitive Access

Undeclared SQLite database credential storage

The skill silently creates and writes to smyx-common-claw.db, storing username, token, open_token, and other user data. SKILL.md does not declare database usage.

skills/smyx_common/scripts/dao.py:60

Declare database storage in SKILL.md or provide user control over local credential storage.

Medium Doc Mismatch

Silent identity auto-creation without consent

OpenIdUtil.get_or_create_default_open_id() automatically generates a default user (User_xxxxxx) and persists it to the local database when no explicit identity is provided. This happens silently without user notification.

skills/smyx_common/scripts/util.py:280

Either require explicit user consent or clearly document automatic identity creation in SKILL.md.

Low Sensitive Access

Automatic path redirection to workspace data directory

Dao.get_db_path() performs complex path manipulation to redirect database paths to the workspace data directory. While this appears intentional for multi-agent isolation, it is not documented.

skills/smyx_common/scripts/dao.py:40

Document the database path redirection behavior for transparency.

Low Doc Mismatch

External video/audio upload not prominently disclosed

The skill uploads household audio/video to external cloud APIs for analysis. While technically mentioned, the privacy implications and data handling are not prominently disclosed in SKILL.md.

skills/smyx_analysis/scripts/skill.py:60

Add prominent privacy notice about cloud video processing in SKILL.md.

Declared capability vs actual capability

Filesystem Block

Declared READ

→

Inferred WRITE

dao.py:60 - creates SQLite database in workspace data dir

Network Block

Declared READ

→

Inferred WRITE

util.py:240 - POSTs video data and user credentials to external API

Database Block

Declared NONE

→

Inferred WRITE

dao.py - creates and writes to smyx-common-claw.db SQLite database

Suspicious artifacts and egress

Medium External URL

https://lifeemergence.com/sample.html

SKILL.md:34

Medium External URL

https://clawhub.ai/user/smyx-sunjinhui

skill-card.md:9

Medium External URL

https://clawhub.ai/smyx-sunjinhui/skills/smyx-family-conflict-aftercare-suggest-analysis

skill-card.md:43

Medium External URL

http://192.168.1.234:9601/smyx-open-api

skills/smyx_common/scripts/config-dev.yaml:2

Medium External URL

http://192.168.1.234:4100

skills/smyx_common/scripts/config-dev.yaml:3

Medium External URL

http://192.168.1.234:7070/jeecg-boot-xzgz

skills/smyx_common/scripts/config-dev.yaml:4

Medium External URL

https://livemonitortest.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config-test.yaml:2

Medium External URL

http://livemonitortest.lifeemergence.com

skills/smyx_common/scripts/config-test.yaml:3

Medium External URL

https://healthtest.lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config-test.yaml:4

Medium External URL

https://lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config.yaml:4

Medium External URL

https://open.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config.yaml:5

Medium External URL

http://livemonitor.lifeemergence.com

skills/smyx_common/scripts/config.yaml:6

Dependencies and supply chain

Package	Version	Source	Known vuln	Notes
pydash	`8.0.6`	pip	No	Pinned
SQLAlchemy	`2.0.46`	pip	No	Pinned
PyYAML	`6.0.3`	pip	No	Pinned
requests	`>=2.28.0`	pip	No	Minimum version specified

File composition

31 files · 2784 lines

Python 18 files · 2363 linesMarkdown 4 files · 381 linesYAML 6 files · 29 linesText 2 files · 6 linesJSON 1 files · 5 lines

Files of concern · 5

skills/smyx_common/scripts/util.py Python · 718 lines

Silent user identity auto-registration · Silent identity auto-creation without consent

skills/smyx_common/scripts/dao.py Python · 499 lines

Undeclared SQLite database credential storage · Automatic path redirection to workspace data directory

SKILL.md Markdown · 194 lines

https://lifeemergence.com/sample.html

skills/smyx_analysis/scripts/skill.py Python · 175 lines

External video/audio upload not prominently disclosed

skill-card.md Markdown · 63 lines

https://clawhub.ai/user/smyx-sunjinhui · https://clawhub.ai/smyx-sunjinhui/skills/smyx-family-conflict-aftercare-suggest-analysis

Other files · config.py · api_doc.md · smyx_analysis.py · smyx_family_conflict_aftercare_suggest_analysis.py · api_service.py · skill.py +1

31 files · 118.9 KB · 2784 lines

Python 18f · 2363LMarkdown 4f · 381LYAML 6f · 29LText 2f · 6LJSON 1f · 5L

├─ ▾ 📁 references

│ └─ 📝 api_doc.md Markdown 105L · 6.5 KB

├─ ▾ 📁 scripts

│ ├─ 🐍 __init__.py Python 1L · 55 B

│ ├─ 🐍 config.py Python 24L · 702 B

│ ├─ 📋 config.yaml YAML 1L · 3 B

│ ├─ 🐍 skill.py Python 23L · 589 B

│ └─ 🐍 smyx_family_conflict_aftercare_suggest_analysis.py Python 102L · 3.7 KB

├─ ▾ 📁 skills

│ ├─ ▾ 📁 smyx_analysis

│ │ ├─ ▾ 📁 references

│ │ │ └─ 📝 api_doc.md Markdown 19L · 427 B

│ │ ├─ ▾ 📁 scripts

│ │ │ ├─ 🐍 __init__.py Python 0 B

│ │ │ ├─ 🐍 api_service.py Python 40L · 1.5 KB

│ │ │ ├─ 🐍 config.py Python 39L · 1003 B

│ │ │ ├─ 📋 config.yaml YAML 1L · 3 B

│ │ │ ├─ 🐍 skill.py Python 175L · 6.4 KB

│ │ │ └─ 🐍 smyx_analysis.py Python 115L · 3.7 KB

│ │ ├─ 🐍 __init__.py Python 0 B

│ │ └─ 📄 requirements.txt Text 3L · 45 B

│ └─ ▾ 📁 smyx_common

│ ├─ ▾ 📁 scripts

│ │ ├─ 🐍 __init__.py Python 9L · 177 B

│ │ ├─ 🐍 api_service.py Python 101L · 2.6 KB

│ │ ├─ 🐍 base.py Python 33L · 469 B

│ │ ├─ 📋 config-dev.yaml YAML 6L · 214 B

│ │ ├─ 📋 config-prod.yaml YAML 0 B

│ │ ├─ 📋 config-test.yaml YAML 6L · 256 B

│ │ ├─ 🐍 config.py Python 399L · 23.8 KB

│ │ ├─ 📋 config.yaml YAML 15L · 472 B

│ │ ├─ 🐍 dao.py Python 499L · 17.8 KB

│ │ ├─ 🐍 skill.py Python 85L · 2.4 KB

│ │ └─ 🐍 util.py Python 718L · 28.1 KB

│ ├─ 🐍 __init__.py Python 0 B

│ └─ 📄 requirements.txt Text 3L · 47 B

├─ 📝 SKILL.md Markdown 194L · 15.4 KB

├─ 📋 _meta.json JSON 5L · 166 B

└─ 📝 skill-card.md Markdown 63L · 2.5 KB

Security positives

No shell execution, subprocess, or base64 obfuscation detected

No access to sensitive paths like ~/.ssh, ~/.aws, or .env files

No credential exfiltration to external servers beyond declared API endpoints

No reverse shell, C2, or malicious data theft patterns

Dependencies have pinned versions (pydash==8.0.6, SQLAlchemy==2.0.46)

Code is readable Python without obfuscation

Explicit security constraints documented (禁止卧室部署, 禁止长期存储音频等)