安全决策报告
smyx-family-conflict-aftercare-suggest-analysis
The skill exhibits several undeclared behaviors including silent user identity auto-creation/registration, automatic SQLite database writes for credential persistence, and external API communication for video analysis without explicit documentation transparency.
最直接的威胁证据
为什么得出这个结论
1/4 个维度触发 阻止
声明与实际能力
发现 3 项声明之外的能力或越权行为。
复核
隐藏执行与外联
提取到 12 个一般风险产物，需要结合上下文判断。
通过
攻击链与高危发现
没有形成明确的恶意路径。
复核
依赖与供应链卫生
发现 3 项需要关注的依赖或供应链线索。
风险分是怎么被拉高的
Silent identity auto-registration +15
_get_or_create_user() calls /sys/phoneLogin with silent=1 and register=1 without user disclosure
Undeclared credential persistence +12
SKILL.md does not document SQLite database writes storing tokens, open_tokens, and user data
Silent user identity creation +10
OpenIdUtil.get_or_create_default_open_id() auto-generates User_xxxxxx identities without user consent
Video/audio cloud upload +5
Household audio/video transmitted to external APIs - declared but privacy implications not highlighted
最关键的证据
中危 文档欺骗
Silent user identity auto-registration
RequestUtil._get_or_create_user() calls POST /sys/phoneLogin with silent=1 and register=1, automatically registering users with the backend API without explicit user disclosure or consent.
skills/smyx_common/scripts/util.py:220 Document this behavior in SKILL.md or provide user-facing opt-in for identity registration.
中危 敏感访问
Undeclared SQLite database credential storage
The skill silently creates and writes to smyx-common-claw.db, storing username, token, open_token, and other user data. SKILL.md does not declare database usage.
skills/smyx_common/scripts/dao.py:60 Declare database storage in SKILL.md or provide user control over local credential storage.
中危 文档欺骗
Silent identity auto-creation without consent
OpenIdUtil.get_or_create_default_open_id() automatically generates a default user (User_xxxxxx) and persists it to the local database when no explicit identity is provided. This happens silently without user notification.
skills/smyx_common/scripts/util.py:280 Either require explicit user consent or clearly document automatic identity creation in SKILL.md.
低危 敏感访问
Automatic path redirection to workspace data directory
Dao.get_db_path() performs complex path manipulation to redirect database paths to the workspace data directory. While this appears intentional for multi-agent isolation, it is not documented.
skills/smyx_common/scripts/dao.py:40 Document the database path redirection behavior for transparency.
低危 文档欺骗
External video/audio upload not prominently disclosed
The skill uploads household audio/video to external cloud APIs for analysis. While technically mentioned, the privacy implications and data handling are not prominently disclosed in SKILL.md.
skills/smyx_analysis/scripts/skill.py:60 Add prominent privacy notice about cloud video processing in SKILL.md.
声明能力 vs 实际能力
文件系统 阻止
声明 READ
→ 推断 WRITE
dao.py:60 - creates SQLite database in workspace data dir 网络访问 阻止
声明 READ
→ 推断 WRITE
util.py:240 - POSTs video data and user credentials to external API 数据库 阻止
声明 NONE
→ 推断 WRITE
dao.py - creates and writes to smyx-common-claw.db SQLite database 可疑产物与外联
中危 外部 URL
https://lifeemergence.com/sample.html SKILL.md:34
中危 外部 URL
https://clawhub.ai/user/smyx-sunjinhui skill-card.md:9
中危 外部 URL
https://clawhub.ai/smyx-sunjinhui/skills/smyx-family-conflict-aftercare-suggest-analysis skill-card.md:43
中危 外部 URL
http://192.168.1.234:9601/smyx-open-api skills/smyx_common/scripts/config-dev.yaml:2
中危 外部 URL
http://192.168.1.234:4100 skills/smyx_common/scripts/config-dev.yaml:3
中危 外部 URL
http://192.168.1.234:7070/jeecg-boot-xzgz skills/smyx_common/scripts/config-dev.yaml:4
中危 外部 URL
https://livemonitortest.lifeemergence.com/smyx-open-api skills/smyx_common/scripts/config-test.yaml:2
中危 外部 URL
http://livemonitortest.lifeemergence.com skills/smyx_common/scripts/config-test.yaml:3
中危 外部 URL
https://healthtest.lifeemergence.com/jeecg-boot-xzgz skills/smyx_common/scripts/config-test.yaml:4
中危 外部 URL
https://lifeemergence.com/jeecg-boot-xzgz skills/smyx_common/scripts/config.yaml:4
中危 外部 URL
https://open.lifeemergence.com/smyx-open-api skills/smyx_common/scripts/config.yaml:5
中危 外部 URL
http://livemonitor.lifeemergence.com skills/smyx_common/scripts/config.yaml:6
依赖与供应链
| 包名 | 版本 | 来源 | 漏洞 | 备注 |
|---|---|---|---|---|
| pydash | 8.0.6 | pip | 否 | Pinned |
| SQLAlchemy | 2.0.46 | pip | 否 | Pinned |
| PyYAML | 6.0.3 | pip | 否 | Pinned |
| requests | >=2.28.0 | pip | 否 | Minimum version specified |
文件构成
31 个文件 · 2784 行
Python 18 个文件 · 2363 行Markdown 4 个文件 · 381 行YAML 6 个文件 · 29 行Text 2 个文件 · 6 行JSON 1 个文件 · 5 行
需关注文件 · 5
skills/smyx_common/scripts/util.py Silent user identity auto-registration · Silent identity auto-creation without consent
skills/smyx_common/scripts/dao.py Undeclared SQLite database credential storage · Automatic path redirection to workspace data directory
SKILL.md https://lifeemergence.com/sample.html
skills/smyx_analysis/scripts/skill.py External video/audio upload not prominently disclosed
skill-card.md https://clawhub.ai/user/smyx-sunjinhui · https://clawhub.ai/smyx-sunjinhui/skills/smyx-family-conflict-aftercare-suggest-analysis
其他文件 · config.py · api_doc.md · smyx_analysis.py · smyx_family_conflict_aftercare_suggest_analysis.py · api_service.py · skill.py +1
安全亮点
No shell execution, subprocess, or base64 obfuscation detected
No access to sensitive paths like ~/.ssh, ~/.aws, or .env files
No credential exfiltration to external servers beyond declared API endpoints
No reverse shell, C2, or malicious data theft patterns
Dependencies have pinned versions (pydash==8.0.6, SQLAlchemy==2.0.46)
Code is readable Python without obfuscation
Explicit security constraints documented (禁止卧室部署, 禁止长期存储音频等)