Skill Trust Decision

rrbdagent

Name: rrbdagent Trust Review Report
Item: rrbdagent
Rating: 80
Author: ClawSafe

这是一个合法的数字人视频创建AI技能，仅调用配置的外部API（rrbd20.yzidea.net）进行身份认证和视频管理，无恶意行为。存在权限声明宽泛的轻微瑕疵。

Install decision first Source: ClawHub Scanned: Apr 3, 2026

Files 38

Artifacts 28

Violations 0

Findings 3

Why this conclusion was reached

0/4 dimensions flagged

Pass

Declared vs actual capability

Declared resources and inferred behavior are broadly aligned.

Review

Hidden execution and egress

28 lower-risk artifacts were extracted and still need context.

Pass

Attack chain and severe findings

There is no explicit malicious chain in the report.

Pass

Dependencies and supply chain hygiene

Dependencies are present but no obvious high-risk issue stands out.

What drove the risk score up

权限声明宽泛 +10

SKILL.md未声明allowed-tools，仅描述功能而无权限边界

敏感文件标记 +5

config.json被标记为敏感文件，但为应用必需配置

凭证存储 +5

登录凭证保存在config.json，略有风险但属应用需求

Most important evidence

Low

权限声明不明确

SKILL.md描述了功能但未声明allowed-tools权限边界

SKILL.md:1

添加allowed-tools声明明确权限范围

Low

config.json包含敏感配置

配置文件包含API基础URL、租户ID和可选的登录凭证

config.json:1

建议凭证不要明文存储，或使用环境变量

Low

memory.json记录历史视频

记忆模块保存了最近10个视频的URL和时间戳

memory.json:1

视频URL为业务数据，存储无安全风险

Declared capability vs actual capability

Filesystem Pass

Declared READ

→

Inferred WRITE

index.js:47-53 memory.json写入; api_client.js:41-45 config.json写入

Network Pass

Declared READ

→

Inferred READ

api_client.js:67-89 仅调用配置的API端点

Shell Pass

Declared NONE

→

Inferred NONE

grep未发现subprocess/child_process/eval/exec

Suspicious artifacts and egress

Medium External URL

https://rrbd20.yzidea.net/api

SKILL.md:112

Medium External URL

https://rrbd20ims.oss-cn-shenzhen.aliyuncs.com/1962755608750927873/20260318/db53e8268c9a4459a9f1280890962099.mp4

memory.json:8

Medium External URL

https://rrbd20ims.oss-cn-shenzhen.aliyuncs.com/1962755608750927873/20260318/2fd0e5fe338745899348050aad92fa03.mp4

memory.json:14

Medium External URL

https://rrbd20ims.oss-cn-shenzhen.aliyuncs.com/1962755608750927873/20260318/174f34fc8bce4dc4b7d38e7b5c2818bd.mp4

memory.json:20

Medium Wallet Address

174f34fc8bce4dc4b7d38e7b5c2818bd

memory.json:20

Medium External URL

https://registry.npmmirror.com/asynckit/-/asynckit-0.4.0.tgz

package-lock.json:17

Medium External URL

https://registry.npmmirror.com/axios/-/axios-1.13.6.tgz

package-lock.json:22

Medium External URL

https://registry.npmmirror.com/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz

package-lock.json:32

Medium External URL

https://registry.npmmirror.com/combined-stream/-/combined-stream-1.0.8.tgz

package-lock.json:44

Medium External URL

https://registry.npmmirror.com/delayed-stream/-/delayed-stream-1.0.0.tgz

package-lock.json:55

Medium External URL

https://registry.npmmirror.com/dunder-proto/-/dunder-proto-1.0.1.tgz

package-lock.json:63

Medium External URL

https://registry.npmmirror.com/es-define-property/-/es-define-property-1.0.1.tgz

package-lock.json:76

Dependencies and supply chain

Package	Version	Source	Known vuln	Notes
axios	`^1.6.2`	npm	No	主流HTTP客户端，无已知漏洞

File composition

38 files · 4024 lines

JavaScript 30 files · 3121 linesJSON 5 files · 516 linesMarkdown 1 files · 275 linesPython 2 files · 112 lines

Files of concern · 3

config.json JSON · 21 lines

config.json包含敏感配置

package-lock.json JSON · 447 lines

https://registry.npmmirror.com/asynckit/-/asynckit-0.4.0.tgz · https://registry.npmmirror.com/axios/-/axios-1.13.6.tgz · https://registry.npmmirror.com/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz · https://registry.npmmirror.com/combined-stream/-/combined-stream-1.0.8.tgz · https://registry.npmmirror.com/delayed-stream/-/delayed-stream-1.0.0.tgz · https://registry.npmmirror.com/dunder-proto/-/dunder-proto-1.0.1.tgz · https://registry.npmmirror.com/es-define-property/-/es-define-property-1.0.1.tgz · https://registry.npmmirror.com/es-errors/-/es-errors-1.3.0.tgz · https://registry.npmmirror.com/es-object-atoms/-/es-object-atoms-1.1.1.tgz · https://registry.npmmirror.com/es-set-tostringtag/-/es-set-tostringtag-2.1.0.tgz · https://registry.npmmirror.com/follow-redirects/-/follow-redirects-1.15.11.tgz · https://registry.npmmirror.com/form-data/-/form-data-4.0.5.tgz · https://registry.npmmirror.com/function-bind/-/function-bind-1.1.2.tgz · https://registry.npmmirror.com/get-intrinsic/-/get-intrinsic-1.3.0.tgz · https://registry.npmmirror.com/get-proto/-/get-proto-1.0.1.tgz · https://registry.npmmirror.com/gopd/-/gopd-1.2.0.tgz · https://registry.npmmirror.com/has-symbols/-/has-symbols-1.1.0.tgz · https://registry.npmmirror.com/has-tostringtag/-/has-tostringtag-1.0.2.tgz · https://registry.npmmirror.com/hasown/-/hasown-2.0.2.tgz · https://registry.npmmirror.com/math-intrinsics/-/math-intrinsics-1.1.0.tgz · https://registry.npmmirror.com/mime-db/-/mime-db-1.52.0.tgz · https://registry.npmmirror.com/mime-types/-/mime-types-2.1.35.tgz · https://registry.npmmirror.com/proxy-from-env/-/proxy-from-env-1.1.0.tgz

SKILL.md Markdown · 275 lines

权限声明不明确 · https://rrbd20.yzidea.net/api

Other files · index.js · api_client.js · create_video_laozeng_shuai2.js · create_video_laozeng_shuai.js · create_video_different_template.js · create_video_laozeng_shuai2_final.js +3

38 files · 138.8 KB · 4024 lines

JavaScript 30f · 3121LJSON 5f · 516LMarkdown 1f · 275LPython 2f · 112L

├─ ▾ 📁 scripts

│ ├─ 📜 check_video_status.js JavaScript 63L · 1.7 KB

│ ├─ 🐍 check_video_status.py Python 49L · 1.5 KB

│ ├─ 📜 create_another_video.js JavaScript 43L · 1.5 KB

│ ├─ 📜 create_laozeng_video.js JavaScript 86L · 3.4 KB

│ ├─ 📜 create_video_custom_title.js JavaScript 43L · 1.5 KB

│ ├─ 📜 create_video_fixed.js JavaScript 43L · 1.5 KB

│ ├─ 📜 generate_new_video.js JavaScript 48L · 1.8 KB

│ ├─ 📜 get_videos_now.js JavaScript 57L · 1.7 KB

│ ├─ 📜 just_get_videos.js JavaScript 51L · 1.6 KB

│ ├─ 📜 laozeng_video.js JavaScript 72L · 2.6 KB

│ ├─ 📜 login_and_check.js JavaScript 121L · 3.7 KB

│ ├─ 📜 make_video_now.js JavaScript 76L · 2.7 KB

│ ├─ 📜 quick_check.js JavaScript 83L · 3.1 KB

│ ├─ 📜 show_me_videos.js JavaScript 114L · 3.4 KB

│ ├─ 📜 test_fixed_code.js JavaScript 82L · 2.8 KB

│ ├─ 📜 test_szr_api.js JavaScript 134L · 4.2 KB

│ └─ 📜 videos_please.js JavaScript 27L · 786 B

├─ 📝 SKILL.md Markdown 275L · 8.7 KB

├─ 📋 _meta.json JSON 5L · 128 B

├─ 📜 api_client.js JavaScript 443L · 15.6 KB

├─ 📜 check_now.js JavaScript 46L · 1.1 KB

├─ 📜 check_simple.js JavaScript 37L · 1.2 KB

├─ 📜 check_videos_now.js JavaScript 40L · 1.0 KB

├─ 🔑 config.json ⚠ JSON 21L · 694 B

├─ 📜 create_video_different_template.js JavaScript 157L · 5.9 KB

├─ 📜 create_video_laozeng_shuai.js JavaScript 158L · 5.9 KB

├─ 📜 create_video_laozeng_shuai2.js JavaScript 159L · 5.9 KB

├─ 📜 create_video_laozeng_shuai2_final.js JavaScript 152L · 5.8 KB

├─ 📜 create_video_using_skill.js JavaScript 146L · 5.1 KB

├─ 📜 index.js JavaScript 450L · 16.9 KB

├─ 📜 list_videos.js JavaScript 61L · 1.9 KB

├─ 🐍 list_videos.py Python 63L · 1.8 KB

├─ 📜 list_videos_final.js JavaScript 52L · 1.4 KB

├─ 📜 list_videos_simple.js JavaScript 47L · 1.3 KB

├─ 📋 memory.json JSON 23L · 948 B

├─ 📋 package-lock.json JSON 447L · 16.9 KB

├─ 📋 package.json JSON 20L · 387 B

└─ 📜 quick_check.js JavaScript 30L · 1003 B

Security positives

无shell执行、eval、base64解码等恶意模式

无环境变量遍历收割凭证行为

无外部IP请求，所有API调用指向配置的后端服务

无数据外泄，所有数据仅在用户授权下传输到目标API

代码功能单一明确，专注视频创建业务

依赖项简单，仅使用axios，无第三方恶意依赖风险