Skill Trust Decision

insurance-advisor-china

Name: insurance-advisor-china Trust Review Report
Item: insurance-advisor-china
Rating: 55
Author: ClawSafe

主脚本安全，但未声明的 datafix 目录存在影子功能，可修改产品数据库。skill-card.md 已承认此风险但 SKILL.md 未提及。

Install decision first Source: ClawHub Scanned: 9 days ago

Files 26

Artifacts 41

Violations 1

Findings 2

Most direct threat evidence

Why this conclusion was reached

1/4 dimensions flagged

Block

Declared vs actual capability

1 undeclared or violating capabilities were inferred.

Review

Hidden execution and egress

41 lower-risk artifacts were extracted and still need context.

Pass

Attack chain and severe findings

There is no explicit malicious chain in the report.

Pass

Dependencies and supply chain hygiene

Dependencies are present but no obvious high-risk issue stands out.

What drove the risk score up

未声明的影子功能 +25

SKILL.md未列出datafix目录，但skill-card.md已承认存在维护脚本可改写产品数据

datafix可写入references/ +15

fix脚本可写products_v2.json、创建备份目录，存在数据篡改风险

subprocess测试调用 +5

test_integration.py通过subprocess运行主脚本，但仅用于测试，不在生产路径

Most important evidence

Medium Doc Mismatch

未声明的影子功能：datafix目录

SKILL.md文件结构仅列出3个主脚本（needs_analyzer.py、premium_calculator.py、plan_designer.py），但实际存在scripts/datafix/目录包含12个维护脚本，可修改references/products_v2.json和创建备份。skill-card.md（ClawHub元数据）已承认此风险但SKILL.md未提及。

scripts/datafix/:1

在SKILL.md文件结构中明确列出datafix目录及其用途，或在部署时排除该目录

Low Supply Chain

无第三方依赖版本锁定

所有Python脚本无requirements.txt，仅使用标准库（json、sys、os、re、datetime、shutil、argparse）。无恶意依赖风险，但缺少依赖声明文件。

scripts/:1

考虑添加requirements.txt声明标准库依赖，提高可复现性

Declared capability vs actual capability

Filesystem Pass

Declared READ

→

Inferred READ

主脚本仅读products.json

Filesystem Block

Declared NONE

→

Inferred WRITE

datafix/lib_common.py可写products_v2.json、备份目录

Network Pass

Declared NONE

→

Inferred NONE

无网络请求代码

Shell Pass

Declared READ

→

Inferred READ

通过exec调用Python脚本，无直接shell命令

Environment Pass

Declared NONE

→

Inferred NONE

grep未匹配到environ/getenv访问

Suspicious artifacts and egress

Medium External URL

https://www.nfra.gov.cn/cn/view/pages/ItemDetail.html?docId=1243185&itemId=915

references/compliance.md:244

Medium External URL

http://finance.people.com.cn/n1/2026/0625/c1004-40747361.html

references/compliance.md:245

Medium External URL

https://finance.cctv.com/2026/06/23/ARTIlD0oVaNYFl6ikGOPrO88260623.shtml

references/compliance.md:246

Medium External URL

https://finance.sina.com.cn/money/insurance/bxdt/2026-06-24/doc-inienxzw6224637.shtml

references/compliance.md:247

Medium External URL

https://www.iachina.cn/art/2026/2/5/art_22_108900.html

references/compliance.md:271

Medium External URL

https://www.iachina.cn/art/2026/4/27/art_9997_108997.html

references/compliance.md:272

Medium External URL

https://www.iachina.cn/col/col3/index.html

references/compliance.md:273

Medium External URL

https://www.iachina.cn/art/2026/4/27/art_22_108996.html

references/compliance.md:274

Medium External URL

https://ltsns.oss-cn-shanghai.aliyuncs.com/2022/02/11d8f356d322240_1_circle.pdf

references/compliance.md:300

Medium External URL

https://www.chfp.org/h-nd-892.html

references/compliance.md:301

Medium External URL

https://www.theactuarymagazine.org/health-insurance-new-regulations-critical-illness-ch

references/compliance.md:302

Medium External URL

https://cpic.com.cn/c/2026-02-02/1880262.shtml

references/compliance.md:303

Dependencies and supply chain

Package	Version	Source	Known vuln	Notes
json	`stdlib`	Python	No	标准库，无外部依赖
sys	`stdlib`	Python	No	标准库
os	`stdlib`	Python	No	标准库
re	`stdlib`	Python	No	标准库
shutil	`stdlib`	Python	No	标准库
argparse	`stdlib`	Python	No	标准库

File composition

26 files · 5219 lines

Python 13 files · 2942 linesMarkdown 6 files · 2067 linesJSON 7 files · 210 lines

Files of concern · 1

references/compliance.md Markdown · 676 lines

https://www.nfra.gov.cn/cn/view/pages/ItemDetail.html?docId=1243185&itemId=915 · http://finance.people.com.cn/n1/2026/0625/c1004-40747361.html · https://finance.cctv.com/2026/06/23/ARTIlD0oVaNYFl6ikGOPrO88260623.shtml · https://finance.sina.com.cn/money/insurance/bxdt/2026-06-24/doc-inienxzw6224637.shtml · https://www.iachina.cn/art/2026/2/5/art_22_108900.html · https://www.iachina.cn/art/2026/4/27/art_9997_108997.html · https://www.iachina.cn/col/col3/index.html · https://www.iachina.cn/art/2026/4/27/art_22_108996.html · https://ltsns.oss-cn-shanghai.aliyuncs.com/2022/02/11d8f356d322240_1_circle.pdf · https://www.chfp.org/h-nd-892.html · https://www.theactuarymagazine.org/health-insurance-new-regulations-critical-illness-ch · https://cpic.com.cn/c/2026-02-02/1880262.shtml · https://www.news.cn/money/20260611/cd91bc815db44d2e9dea741c01b2393c/c.html · https://view.inews.qq.com/a/20260630A086X400 · https://caifuhao.eastmoney.com/news/20260215153146855947430 · https://www.pwccn.com/zh/press-room/press-releases/pr-170626.html · https://www.yicai.com/news/103078474.html · https://m.shenlanbao.com/zhishi/7-726048 · https://news.sina.cn/2025-12-31/detail-inhetcuh3597386.d.html?vt=4 · https://www.xincai.com/article/nhetcui5122582 · https://www.stcn.com/article/detail/1712214.html · https://baike.baidu.com/item/%E4%B8%87%E8%83%BD/20595736 · https://m.mp.oeeee.com/a/BAAFRD0000202504271078929.html · https://finance.caixin.com/2025-04-25/102313269.html · https://www.163.com/dy/article/KU3T19F40556K37K.html · https://pdf.hanspub.org/wer_2350649.pdf · https://www.cls.cn/detail/1772369 · https://finance.sina.com.cn/roll/2026-01-25/doc-inhipmcx9880259.shtml · https://www.stcn.com/article/detail/3945403.html · http://www.jmnews.com.cn/a/content/2026-07/24/content_2781709.htm · https://biz.ifeng.com/c/8umZ29iF7dl · https://news.qq.com/rain/a/20260628A01N8100 · https://www.sem.tsinghua.edu.cn/info/1022/37767.htm · https://www.sznews.com/news/content/2026-01/13/content_31902288.htm · https://finance.cctv.com/2026/05/22/ARTIz0PTN37YdxBwpYuA3AXr260522.shtml · https://view.inews.qq.com/a/20251225A065Q000 · https://www.chnfund.com/article/AR61f3a6e7-c6d1-12a2-ac5d-3a1e5cccbd9b · https://www.fangdalaw.com/content/details32_9213.html · https://finance.sina.com.cn/wm/2026-05-20/doc-inhypnup6999388.shtml

Other files · products.json · _repo_analysis_2026-08-21.md · plan_designer.py · fix_P1-4_validity_consistency.py · insurance-knowledge.md · 保险资料库分析报告_2026-08-26.md +5

26 files · 4.2 MB · 5219 lines

Python 13f · 2942LMarkdown 6f · 2067LJSON 7f · 210L

├─ ▾ 📁 references

│ ├─ 📝 _repo_analysis_2026-08-21.md Markdown 329L · 17.9 KB

│ ├─ 📝 compliance.md Markdown 676L · 29.2 KB

│ ├─ 📝 insurance-knowledge.md Markdown 390L · 14.6 KB

│ ├─ 📋 products.json JSON 1L · 4.0 MB

│ └─ 📝 保险资料库分析报告_2026-08-26.md Markdown 277L · 14.6 KB

├─ ▾ 📁 scripts

│ ├─ ▾ 📁 datafix

│ │ ├─ ▾ 📁 reports

│ │ │ ├─ 📋 P0-1_name_clean_report.json JSON 10L · 292 B

│ │ │ ├─ 📋 P0-2_coverage_period_none_report.json JSON 99L · 2.8 KB

│ │ │ ├─ 📋 P0-2_listing_time_report.json JSON 14L · 405 B

│ │ │ ├─ 📋 P1-3_coverage_types_report.json JSON 31L · 793 B

│ │ │ ├─ 📋 P1-4_validity_consistency_report.json JSON 36L · 1.2 KB

│ │ │ └─ 📋 P1-5_coverage_period_split_report.json JSON 19L · 531 B

│ │ ├─ 🐍 fix_P0-1_name_clean.py Python 214L · 7.6 KB

│ │ ├─ 🐍 fix_P0-2_listing_time.py Python 160L · 5.2 KB

│ │ ├─ 🐍 fix_P1-3_coverage_types.py Python 231L · 8.6 KB

│ │ ├─ 🐍 fix_P1-4_validity_consistency.py Python 361L · 14.8 KB

│ │ ├─ 🐍 fix_P1-5_coverage_period_split.py Python 301L · 10.7 KB

│ │ ├─ 🐍 fix_phase0_coverage_period_none.py Python 104L · 3.4 KB

│ │ ├─ 🐍 fix_phase0_premium_calculator.py Python 202L · 6.7 KB

│ │ ├─ 🐍 lib_common.py Python 72L · 2.0 KB

│ │ ├─ 🐍 test_e2e_regression.py Python 150L · 5.8 KB

│ │ └─ 🐍 test_integration.py Python 241L · 8.7 KB

│ ├─ 🐍 needs_analyzer.py Python 203L · 8.3 KB

│ ├─ 🐍 plan_designer.py Python 415L · 16.4 KB

│ └─ 🐍 premium_calculator.py Python 288L · 10.8 KB

├─ 📝 SKILL.md Markdown 333L · 11.9 KB

└─ 📝 skill-card.md Markdown 62L · 2.9 KB

Security positives

主脚本（needs_analyzer.py、premium_calculator.py、plan_designer.py）完全干净，无网络请求、无凭证访问、无外部数据外泄

无base64编码、eval执行、shell管道等高危模式

subprocess仅用于test_integration.py中的合法测试，不在主执行路径

datafix脚本有dry-run支持和备份机制，设计较规范

skill-card.md已主动披露datafix风险