Skill Trust Decision
digital-twin-patient-builder
合法医疗建模工具，代码无恶意行为，但存在文档-行为不一致（声明网络访问但实际未使用）
Why this conclusion was reached
1/4 dimensions flagged Block
Declared vs actual capability
1 undeclared or violating capabilities were inferred.
Pass
Hidden execution and egress
No obvious high-risk egress or execution signals were found.
Pass
Attack chain and severe findings
There is no explicit malicious chain in the report.
Pass
Dependencies and supply chain hygiene
Dependencies are present but no obvious high-risk issue stands out.
What drove the risk score up
文档-行为不一致 +15
SKILL.md声明'External API calls'和'Network Access: High'，但scripts/main.py中无任何网络请求代码
声明权限过宽 +5
Security Checklist声称9项未勾选，实际代码不涉及敏感操作
Most important evidence
Low Doc Mismatch
文档声明网络访问但实际未使用
SKILL.md的Risk Assessment声明'Network Access: High'，Technical Architecture提及'External API calls'，但scripts/main.py中完全没有网络请求代码（无requests/urllib/httpx/curl等）。这是轻微的文档欺骗，不影响安全性。
SKILL.md:36 修正SKILL.md，移除关于网络访问的声明，或补充实际使用的API端点
Low Doc Mismatch
Security Checklist声称多项未实现但实际不适用
SKILL.md的Security Checklist包含12项安全措施，全部未勾选，但这些措施（如API timeout、HTTPS检查）对于本地计算工具并不适用。
SKILL.md:96 根据实际功能调整安全清单，移除不适用的网络相关项目
Info Supply Chain
依赖声明不完整
SKILL.md声明需要scipy和pandas，但requirements.txt只列出dataclasses(标准库)、enum(标准库)、numpy。代码中确实只使用了numpy。
SKILL.md:67 移除requirements.txt中不使用的scipy和pandas声明
Declared capability vs actual capability
Filesystem Pass
Declared WRITE
→ Inferred READ+WRITE
scripts/main.py:360-363 读取JSON文件，scripts/main.py:379-380 写入结果 Network Block
Declared READ (声明外部API调用)
→ Inferred NONE
scripts/main.py全文无requests/urllib/http.client/curl等网络相关导入或调用 Shell Pass
Declared NONE
→ Inferred NONE
无subprocess/popen/os.system调用 Environment Pass
Declared NONE
→ Inferred NONE
无os.environ访问 Skill Invoke Pass
Declared NONE
→ Inferred NONE
无动态技能调用 Clipboard Pass
Declared NONE
→ Inferred NONE
无剪贴板访问 Browser Pass
Declared NONE
→ Inferred NONE
无浏览器自动化代码 Database Pass
Declared NONE
→ Inferred NONE
无数据库连接代码 Suspicious artifacts and egress
No obvious IOC was extracted.
Dependencies and supply chain
| Package | Version | Source | Known vuln | Notes |
|---|---|---|---|---|
| numpy | 未指定 | requirements.txt | No | 核心依赖，用于数值计算 |
| scipy | 未使用 | SKILL.md声明 | No | 文档声明但代码中未导入 |
| pandas | 未使用 | SKILL.md声明 | No | 文档声明但代码中未导入 |
File composition
3 files · 695 lines
Python 1 files · 485 linesMarkdown 1 files · 207 linesText 1 files · 3 lines
Files of concern · 1
SKILL.md 文档声明网络访问但实际未使用 · Security Checklist声称多项未实现但实际不适用 · 依赖声明不完整
Other files · main.py · requirements.txt
Security positives
纯本地计算，无网络通信风险
无subprocess/shell执行，无代码注入风险
无环境变量遍历，无凭证收割风险
无访问敏感路径（~/.ssh、~/.aws、.env）
代码结构清晰，药代动力学模型实现规范
依赖简单，仅使用numpy进行数值计算
输入验证通过argparse规范化