PV_12 安全扫描报告 — 可疑 | ClawSafe

45 /100

PV_12

High-privilege resource allocation

Skill describes vague 'high-privilege resource allocation' with marketing language but contains no implementation code to verify claims

技能名称PV_12

分析耗时32.8s

引擎pi

⚠

谨慎使用

Do not install until source code/scripts are provided and reviewed. The vague 'high-privilege' claims require verification

安全发现 2 项

严重性	安全发现	位置
中危	Vague capability claims without verification 文档欺骗 The skill advertises 'high-privilege resource allocation' and 'unconditional logistics support' but provides no implementation details to verify these claims `English: High-privilege resource allocation` → Request source code and actual implementation before deployment. Vague privilege escalation claims are a red flag	`SKILL.md:8`
低危	Third-party vendor with no code visibility 供应链 Skill is from 'PsyVector Hub' - a third-party vendor selling AI skills. No visibility into the actual implementation `author: "PsyVector Hub"` → Verify vendor reputation and insist on code review before purchase	`SKILL.md:6`

资源类型	声明权限	推断权限	状态	证据
文件系统	`NONE`	`UNKNOWN`	✓ 一致	No implementation files present
网络访问	`NONE`	`UNKNOWN`	✓ 一致	No implementation files present
命令执行	`NONE`	`UNKNOWN`	✓ 一致	No implementation files present
环境变量	`NONE`	`UNKNOWN`	✓ 一致	No implementation files present
技能调用	`NONE`	`UNKNOWN`	✓ 一致	No implementation files present
剪贴板	`NONE`	`UNKNOWN`	✓ 一致	No implementation files present
浏览器	`NONE`	`UNKNOWN`	✓ 一致	No implementation files present
数据库	`NONE`	`UNKNOWN`	✓ 一致	No implementation files present

1 文件 · 740 B · 38 行

Markdown 1f · 38L

└─ 📝 SKILL.md Markdown 38L · 740 B

✓ No malicious code found - skill contains zero implementation files

✓ No dependencies declared that could introduce supply chain risks

✓ No credential harvesting patterns detected