中文 EN
Start Review
Skill Trust Decision

1688-common-skill-config

凭证管理工具，设计存在安全隐患（明文存储、无加密验证），但未发现恶意行为或数据外传迹象

Install decision first Source: ClawHub Scanned: Sep 1, 2026
Files 3
Artifacts 6
Violations 1
Findings 3

Why this conclusion was reached

1/4 dimensions flagged
Block
Declared vs actual capability

1 undeclared or violating capabilities were inferred.

Review
Hidden execution and egress

6 lower-risk artifacts were extracted and still need context.

Pass
Attack chain and severe findings

There is no explicit malicious chain in the report.

Pass
Dependencies and supply chain hygiene

Dependencies are present but no obvious high-risk issue stands out.

What drove the risk score up

凭证明文存储 +15

1688 AK 直接写入 ak_store.json 明文存储，无加密保护

修改系统配置文件 +10

通过 sed 直接修改 ~/.bashrc 添加环境变量，有权限越界风险

Most important evidence

Medium Credential Theft

1688 AK 明文存储无加密保护

1688 Gateway AK 以明文形式写入 ak_store.json 文件，没有任何加密或签名验证机制。如果文件被窃取，凭证直接泄露。

scripts/configure_ak.py:55
使用加密存储（如 Python Fernet 或系统密钥链）；或在写入前验证 AK 格式有效性
Medium Priv Escalation

通过 sed 直接修改 ~/.bashrc

SKILL.md 场景1 Step2 展示了用 sed 直接修改 ~/.bashrc 添加环境变量的代码。这种方式：1) 绕过用户确认直接写入；2) 语法错误可能破坏 bashrc；3) 需要文件系统写权限。

SKILL.md:89
使用专门的凭证管理工具（如 keyring）或要求用户手动配置；如必须自动化，应创建独立配置文件
Low Supply Chain

无依赖锁定，存在供应链风险

scripts/configure_ak.py 仅使用标准库 (argparse, json, os, subprocess, sys, pathlib)，无外部依赖引入。

scripts/configure_ak.py:1
无需行动

Declared capability vs actual capability

Filesystem Pass
Declared READ
→
Inferred WRITE
SKILL.md 声明通过 cli.py 写入 AK；scripts/configure_ak.py:71 执行 subprocess 写文件
Shell Pass
Declared WRITE
→
Inferred WRITE
SKILL.md 声明使用 bash find/sed；scripts/configure_ak.py:69-76 执行 subprocess
Environment Block
Declared READ
→
Inferred WRITE
SKILL.md 仅声明查询状态；但代码通过 sed 写入 ~/.bashrc (SKILL.md 场景1 Step2)
Network Pass
Declared NONE
→
Inferred NONE
无网络请求发现

Suspicious artifacts and egress

Medium External URL
https://clawhub.1688.com/

SKILL.md:193

Medium External URL
https://www.alphashop.cn/seller-center/apikey-management

SKILL.md:203

Medium External URL
https://qianji.alibaba-inc.com/?_path_=crm/indexChannel/ak-manage

SKILL.md:213

Medium External URL
https://www.alphashop.cn/seller-center/home/api-list

assets/ak-dashboard.html:129

Medium External URL
https://clawhub.1688.com/\n登录后右上角点击

assets/ak-dashboard.html:186

Medium External URL
https://www.alphashop.cn/seller-center/apikey-management\n（支持

assets/ak-dashboard.html:187

Dependencies and supply chain

PackageVersionSourceKnown vulnNotes
Python标准库 N/A stdlib No 仅使用标准库，无外部依赖

File composition

3 files · 705 lines
Markdown 1 files · 298 linesHTML 1 files · 224 linesPython 1 files · 183 lines
Files of concern · 3
assets/ak-dashboard.html HTML · 224 lines
https://www.alphashop.cn/seller-center/home/api-list · https://clawhub.1688.com/\n登录后右上角点击 · https://www.alphashop.cn/seller-center/apikey-management\n（支持
SKILL.md Markdown · 298 lines
通过 sed 直接修改 ~/.bashrc · https://clawhub.1688.com/ · https://www.alphashop.cn/seller-center/apikey-management · https://qianji.alibaba-inc.com/?_path_=crm/indexChannel/ak-manage
scripts/configure_ak.py Python · 183 lines
1688 AK 明文存储无加密保护 · 无依赖锁定，存在供应链风险

Security positives

未发现网络请求，无数据外传迹象
凭证仅在本地存储和使用，不涉及跨实例共享
状态查询不暴露凭证明文（仅显示长度）
用户确认机制完善（配置前需确认类型和影响范围）
HTML dashboard 为纯前端展示，无恶意脚本
无 base64 编码执行、eval 动态执行等高危模式