安全决策报告

messenger_send_node

Name: messenger_send_node 可信度判断报告
Item: messenger_send_node
Rating: 5
Author: ClawSafe

The skill masquerades as a FLO blockchain messenger but secretly performs Tor network detection, checks user IP against 1000+ hardcoded Tor exit nodes, and routes traffic through Tor .onion addresses when detected - all completely undeclared in documentation.

安装决策优先来源: 手动上传扫描时间: 2026/4/4

文件 6

IOC 1300

越权项 2

发现 5

最直接的威胁证据

严重文档欺骗

Undeclared Tor Network Detection and Routing

The skill secretly checks if the user is on a Tor exit node by fetching their public IP from api.ipify.org and comparing against 1000+ hardcoded Tor exit node IPs. If Tor is detected, it adds .onion routing to blockchain API calls.

scripts/floBlockchainAPI.js:21

为什么得出这个结论

3/4 个维度触发

阻止

声明与实际能力

发现 2 项声明之外的能力或越权行为。

阻止

隐藏执行与外联

提取到 1295 个高危 IOC 或外联信号。

阻止

攻击链与高危发现

报告包含 5 步攻击链，另有 4 项高危或严重发现。

复核

依赖与供应链卫生

发现 1 项需要关注的依赖或供应链线索。

攻击链

Masquerades as legitimate FLO blockchain messenger in SKILL.md

初始入口 · SKILL.md:1

Silently fetches user's public IP from api.ipify.org

recon · scripts/floBlockchainAPI.js:32

Compares user IP against 1000+ Tor exit node IPs stored in torExitNodes Set

recon · scripts/floBlockchainAPI.js:21

If Tor detected, silently adds .onion address to blockchain API endpoints

权限提升 · scripts/floBlockchainAPI.js:39

Routes all blockchain traffic through Tor network when Tor user detected

最终危害 · scripts/floBlockchainAPI.js:39

风险分是怎么被拉高的

Undeclared Tor network detection +35

checkIfTor() function fetches user IP and compares against 1000+ Tor exit nodes - NOT in SKILL.md

Undeclared Tor onion routing +30

Adds .onion address to API endpoints when Tor detected - hidden from documentation

Tor exit node surveillance list +20

~1000+ Tor exit node IPs hardcoded for IP tracking/detection

Documentation deception +10

SKILL.md only mentions 'supernode list' - no mention of Tor or anonymization

最关键的证据

严重文档欺骗

Undeclared Tor Network Detection and Routing

scripts/floBlockchainAPI.js:21

This Tor detection functionality must be declared in SKILL.md or removed entirely

严重文档欺骗

Hidden .onion Routing for Anonymization

When Tor is detected, the code adds a .onion address to DEFAULT.apiURL.FLO for routing through Tor network - completely undeclared.

scripts/floBlockchainAPI.js:39

This onion routing behavior must be documented with security implications explained

高危敏感访问

User IP Address Tracking via External Service

The checkIfTor() function calls api.ipify.org to fetch the user's public IP address for comparison against Tor exit nodes - tracking user network location.

scripts/floBlockchainAPI.js:32

IP address collection should be declared and justified in documentation

高危供应链

Missing Required Dependency: scripts/lib.js

send_node.js attempts to load scripts/lib.js which does not exist in the package - script will fail to execute.

send_node.js:70

Ensure all required dependencies are included or document alternative loading mechanism

中危代码混淆

Base64 Polyfill for Node.js Compatibility

Buffer.from/atob polyfill at send_node.js:48-49 - appears suspicious but is legitimate polyfill code for Node.js browser API compatibility.

send_node.js:48

No action needed - standard browser API polyfill

声明能力 vs 实际能力

网络访问 阻止

声明 READ

→

推断 READ+ANONYMIZE

scripts/floBlockchainAPI.js:21-40 torExitNodes Set + checkIfTor()

文件系统 阻止

声明 NONE

→

推断 READ

send_node.js loads scripts/lib.js (missing file)

可疑产物与外联

严重编码执行

Buffer.from(b64, 'base64'

send_node.js:48

高危 IP 地址

185.241.208.232