Skill Trust Decision

smyx-pet-grooming-stress-behavior-analysis

Name: smyx-pet-grooming-stress-behavior-analysis Trust Review Report
Item: smyx-pet-grooming-stress-behavior-analysis
Rating: 62
Author: ClawSafe

技能核心功能为合法的视频分析，但存在大量未声明的身份管理、凭证存储和静默用户注册机制，构成显著文档-行为差异风险。

Install decision first Source: ClawHub Scanned: 9 days ago

Files 31

Artifacts 12

Violations 3

Findings 5

Most direct threat evidence

用户上传宠物美容视频触发技能 Entry · SKILL.md

技能自动初始化用户身份，若无凭证则静默注册新账户 Escalation · skills/smyx_common/scripts/util.py

用户凭证(token/open_token/email)被存储到本地 SQLite 数据库 Escalation · skills/smyx_common/scripts/dao.py

Why this conclusion was reached

2/4 dimensions flagged

Block

Declared vs actual capability

3 undeclared or violating capabilities were inferred.

Review

Hidden execution and egress

12 lower-risk artifacts were extracted and still need context.

Block

Attack chain and severe findings

The report includes 4 attack-chain steps and 1 severe findings.

Pass

Dependencies and supply chain hygiene

Dependencies are present but no obvious high-risk issue stands out.

Attack Chain

用户上传宠物美容视频触发技能

Entry · SKILL.md:1

技能自动初始化用户身份，若无凭证则静默注册新账户

Escalation · skills/smyx_common/scripts/util.py:287

用户凭证(token/open_token/email)被存储到本地 SQLite 数据库

Escalation · skills/smyx_common/scripts/dao.py:141

后续请求携带凭证调用远程 API，凭证随请求外传

Impact · skills/smyx_common/scripts/util.py:350

What drove the risk score up

静默用户注册机制 +15

_get_or_create_user() 调用 /sys/phoneLogin API 自动注册用户，未在 SKILL.md 声明

本地凭证数据库存储 +10

dao.py 创建 SQLite 数据库存储 token/open_token/email 等敏感字段

注释掉的远程代码执行 +8

AgentSkill.ai_chat() 包含被注释的 subprocess.run(openclaw agent) 调用

环境变量凭证读取 +5

config.py 读取 OPENCLAW_SENDER_OPEN_ID 等环境变量用于身份识别

Most important evidence

High Doc Mismatch

静默用户自动注册

RequestUtil._get_or_create_user() 通过 /sys/phoneLogin API 自动注册用户（使用 username 作为手机号），用户无感知且 SKILL.md 完全未声明此行为。

skills/smyx_common/scripts/util.py:287

在 SKILL.md 中明确声明自动注册机制，或提供用户知情同意流程

Medium Credential Theft

本地 SQLite 数据库存储凭证

dao.py 创建本地数据库存储 token/open_token/email/birthday 等敏感字段。User 模型包含: id, source_id, username, realname, email, birthday, token, open_token 等字段。

skills/smyx_common/scripts/dao.py:141

明确说明为何需要本地存储凭证，考虑使用系统密钥链而非明文 SQLite

Medium Obfuscation

注释掉的远程代码执行功能

AgentSkill.ai_chat() 包含完整的 subprocess.run(['openclaw', 'agent', ...]) 代码框架，仅被注释。虽然当前不活跃，但表明曾考虑或开发过远程命令执行能力。

skills/smyx_common/scripts/skill.py:43

如无必要用途，应彻底删除此代码而非仅注释

Low Sensitive Access

环境变量身份读取

config.py ConstantEnum.init() 从环境变量读取 OPENCLAW_SENDER_OPEN_ID, OPENCLAW_SENDER_USERNAME, FEISHU_OPEN_ID 用于身份识别。

skills/smyx_common/scripts/config.py:103

已在 skill-card.md 中部分披露，但应在 SKILL.md 主文档中明确说明

Low Doc Mismatch

未声明的缺省用户生成

OpenIdUtil.generate_default_open_id() 生成 User_{6位随机哈希} 作为缺省身份并持久化存储，用于跨会话追踪。

skills/smyx_common/scripts/util.py:118

在 SKILL.md 中明确说明缺省用户生成和追踪机制

Declared capability vs actual capability

Filesystem Block

Declared NONE

→

Inferred WRITE

dao.py:56 - 创建 SQLite 数据库文件

Environment Block

Declared NONE

→

Inferred READ

config.py:103 - 读取 OPENCLAW_SENDER_OPEN_ID

Network Block

Declared READ

→

Inferred READ+WRITE

util.py:287 - POST 用户注册 API

Shell Pass

Declared NONE

→

Inferred WRITE

skill.py:43-51 - 注释掉的 subprocess.run

Suspicious artifacts and egress

Medium External URL

https://lifeemergence.com/sample.html

SKILL.md:37

Medium External URL

https://clawhub.ai/user/18072937735

skill-card.md:9

Medium External URL

https://clawhub.ai/18072937735/skills/smyx-pet-grooming-stress-behavior-analysis

skill-card.md:39

Medium External URL

http://192.168.1.234:9601/smyx-open-api

skills/smyx_common/scripts/config-dev.yaml:2

Medium External URL

http://192.168.1.234:4100

skills/smyx_common/scripts/config-dev.yaml:3

Medium External URL

http://192.168.1.234:7070/jeecg-boot-xzgz

skills/smyx_common/scripts/config-dev.yaml:4

Medium External URL

https://livemonitortest.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config-test.yaml:2

Medium External URL

http://livemonitortest.lifeemergence.com

skills/smyx_common/scripts/config-test.yaml:3

Medium External URL

https://healthtest.lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config-test.yaml:4

Medium External URL

https://lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config.yaml:4

Medium External URL

https://open.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config.yaml:5

Medium External URL

http://livemonitor.lifeemergence.com

skills/smyx_common/scripts/config.yaml:6

Dependencies and supply chain

Package	Version	Source	Known vuln	Notes
pydash	`8.0.6`	pip	No	版本已锁定
SQLAlchemy	`2.0.46`	pip	No	版本已锁定
PyYAML	`6.0.3`	pip	No	版本已锁定

File composition

31 files · 2716 lines

Python 18 files · 2363 linesMarkdown 4 files · 313 linesYAML 6 files · 29 linesText 2 files · 6 linesJSON 1 files · 5 lines

Files of concern · 6

skills/smyx_common/scripts/util.py Python · 718 lines

静默用户自动注册 · 未声明的缺省用户生成

skills/smyx_common/scripts/config.py Python · 399 lines

环境变量身份读取

skills/smyx_common/scripts/dao.py Python · 499 lines

本地 SQLite 数据库存储凭证

SKILL.md Markdown · 215 lines

https://lifeemergence.com/sample.html

skills/smyx_common/scripts/skill.py Python · 85 lines

注释掉的远程代码执行功能

skill-card.md Markdown · 59 lines

https://clawhub.ai/user/18072937735 · https://clawhub.ai/18072937735/skills/smyx-pet-grooming-stress-behavior-analysis

Other files · skill.py · smyx_analysis.py · smyx_pet_grooming_stress_behavior_analysis.py · api_service.py · api_service.py · config.py

31 files · 110.4 KB · 2716 lines

Python 18f · 2363LMarkdown 4f · 313LYAML 6f · 29LText 2f · 6LJSON 1f · 5L

├─ ▾ 📁 references

│ └─ 📝 api_doc.md Markdown 20L · 678 B

├─ ▾ 📁 scripts

│ ├─ 🐍 __init__.py Python 1L · 56 B

│ ├─ 🐍 config.py Python 24L · 679 B

│ ├─ 📋 config.yaml YAML 1L · 3 B

│ ├─ 🐍 skill.py Python 23L · 585 B

│ └─ 🐍 smyx_pet_grooming_stress_behavior_analysis.py Python 102L · 3.5 KB

├─ ▾ 📁 skills

│ ├─ ▾ 📁 smyx_analysis

│ │ ├─ ▾ 📁 references

│ │ │ └─ 📝 api_doc.md Markdown 19L · 427 B

│ │ ├─ ▾ 📁 scripts

│ │ │ ├─ 🐍 __init__.py Python 0 B

│ │ │ ├─ 🐍 api_service.py Python 40L · 1.5 KB

│ │ │ ├─ 🐍 config.py Python 39L · 1003 B

│ │ │ ├─ 📋 config.yaml YAML 1L · 3 B

│ │ │ ├─ 🐍 skill.py Python 175L · 6.4 KB

│ │ │ └─ 🐍 smyx_analysis.py Python 115L · 3.7 KB

│ │ ├─ 🐍 __init__.py Python 0 B

│ │ └─ 📄 requirements.txt Text 3L · 45 B

│ └─ ▾ 📁 smyx_common

│ ├─ ▾ 📁 scripts

│ │ ├─ 🐍 __init__.py Python 9L · 177 B

│ │ ├─ 🐍 api_service.py Python 101L · 2.6 KB

│ │ ├─ 🐍 base.py Python 33L · 469 B

│ │ ├─ 📋 config-dev.yaml YAML 6L · 214 B

│ │ ├─ 📋 config-prod.yaml YAML 0 B

│ │ ├─ 📋 config-test.yaml YAML 6L · 256 B

│ │ ├─ 🐍 config.py Python 399L · 23.8 KB

│ │ ├─ 📋 config.yaml YAML 15L · 473 B

│ │ ├─ 🐍 dao.py Python 499L · 17.8 KB

│ │ ├─ 🐍 skill.py Python 85L · 2.4 KB

│ │ └─ 🐍 util.py Python 718L · 28.1 KB

│ ├─ 🐍 __init__.py Python 0 B

│ └─ 📄 requirements.txt Text 3L · 47 B

├─ 📝 SKILL.md Markdown 215L · 13.3 KB

├─ 📋 _meta.json JSON 5L · 162 B

└─ 📝 skill-card.md Markdown 59L · 2.1 KB

Security positives

依赖版本已锁定 (pydash==8.0.6, SQLAlchemy==2.0.46, PyYAML==6.0.3)

核心视频分析功能与声明一致

未发现 base64 编码执行、裸 IP 请求等典型恶意模式

AgentSkill 类虽存在但未被主流程调用