安全决策报告
amazon-screenshot
Legitimate Amazon screenshot automation with hardcoded SMTP credential and unpinned dependencies as primary concerns.
为什么得出这个结论
2/4 个维度触发 阻止
声明与实际能力
发现 1 项声明之外的能力或越权行为。
复核
隐藏执行与外联
提取到 9 个一般风险产物，需要结合上下文判断。
阻止
攻击链与高危发现
报告包含 0 步攻击链，另有 1 项高危或严重发现。
复核
依赖与供应链卫生
发现 4 项需要关注的依赖或供应链线索。
风险分是怎么被拉高的
Hardcoded SMTP credential in source +15
SMTP password 'rDs70BwDDg6U9YbO' for [email protected] is embedded in screenshot.js line 54, not declared in SKILL.md, and visible in skill-card.md Known Risks section
Unpinned dependencies +8
package.json uses caret versions (^8.0.7, ^1.59.1) allowing automatic minor version updates
Undeclared shell execution +5
execSync with inline Python script for X11 display detection not mentioned in SKILL.md
最关键的证据
高危 凭证窃取
Hardcoded SMTP service account credential
SMTP password for [email protected] is embedded as a plain-text string in screenshot.js line 54. While acknowledged in skill-card.md, it is not declared in SKILL.md and creates risk if source is exposed.
scripts/screenshot.js:54 Move SMTP credentials to environment variables or a secrets manager. Rotate the exposed password immediately.
中危 供应链
Unpinned dependency versions
All dependencies use caret (^) versioning allowing automatic updates: nodemailer@^8.0.7, playwright@^1.59.1. Malicious updates could be injected via npm registry.
package.json:3 Pin exact versions ([email protected], [email protected]) to prevent supply chain attacks.
低危 文档欺骗
Shell execution not declared in SKILL.md
autoDetectDisplay() uses execSync to run an inline Python script querying /tmp/.X11-unix/ for X11 sockets. This shell execution is not mentioned in SKILL.md documentation.
scripts/screenshot.js:35 Document shell execution capability in SKILL.md or refactor to use Node.js native APIs.
低危 敏感访问
Persistent Chrome browser profile storage
The script uses a persistent Chrome profile (chrome_profile/) to maintain login sessions and cookies, which persists sensitive authentication data.
scripts/screenshot.js:65 Use ephemeral browser contexts without persistent storage for better security isolation.
声明能力 vs 实际能力
文件系统 通过
声明 WRITE
→ 推断 WRITE
Creates screenshots and ZIP files in outputs/ directory 网络访问 通过
声明 READ
→ 推断 READ
Fetches Amazon pages via Playwright browser automation 命令执行 阻止
声明 NONE
→ 推断 WRITE
scripts/screenshot.js:35 - execSync runs Python for X11 detection 浏览器 通过
声明 READ
→ 推断 READ
Playwright with persistent Chrome profile for Amazon automation 可疑产物与外联
中危 外部 URL
https://www.amazon.com/https://www.amazon.com/ chrome_profile/Default/Service Worker/CacheStorage/2a1c18365e83cb6e1347464058faa3d44e45a31c/index.txt:11
中危 外部 URL
https://www.patreon.com/feross scripts/package-lock.json:84
中危 外部 URL
https://feross.org/support scripts/package-lock.json:88
中危 外部 URL
https://www.amazon.com/dp/$ scripts/screenshot.js:65
中危 外部 URL
https://www.amazon.com scripts/screenshot.js:135
中危 外部 URL
https://clawhub.ai/user/328786889 skill-card.md:7
中危 外部 URL
https://clawhub.ai/328786889/amazon-screenshot skill-card.md:29
依赖与供应链
| 包名 | 版本 | 来源 | 漏洞 | 备注 |
|---|---|---|---|---|
| nodemailer | ^8.0.7 | npm | 否 | Version not pinned |
| playwright | ^1.59.1 | npm | 否 | Version not pinned |
| playwright-extra | ^4.3.6 | npm | 否 | Version not pinned |
| playwright-extra-plugin-stealth | ^0.0.1 | npm | 否 | Version not pinned |
文件构成
11 个文件 · 1480 行
JSON 7 个文件 · 979 行JavaScript 1 个文件 · 373 行Markdown 2 个文件 · 118 行Text 1 个文件 · 10 行
需关注文件 · 6
scripts/package-lock.json https://www.patreon.com/feross · https://feross.org/support
scripts/screenshot.js Hardcoded SMTP service account credential · Shell execution not declared in SKILL.md · Persistent Chrome browser profile storage · https://www.amazon.com/dp/$ · https://www.amazon.com
SKILL.md skill-card.md https://clawhub.ai/user/328786889 · https://clawhub.ai/328786889/amazon-screenshot
chrome_profile/Default/Service Worker/CacheStorage/2a1c18365e83cb6e1347464058faa3d44e45a31c/index.txt https://www.amazon.com/https://www.amazon.com/
package.json Unpinned dependency versions
其他文件 · package-lock.json · package.json · _meta.json · metadata.json · metadata.json
安全亮点
Legitimate business functionality with clear user consent model (requires ASINs and email from user)
Intentional email domain restriction (@campsnail.com only) limits misuse scope
Automatic cleanup of temporary screenshots and ZIP files after email delivery
Lock file mechanism prevents concurrent execution abuse
No evidence of data exfiltration or unauthorized credential harvesting from host environment
Stealth automation and persistent login states are declared in SKILL.md under '反爬注入' and '持久化登录状态'