中文 EN
Start Review
Skill Trust Decision

skill-publisher

skill-publisher 包含硬编码 GitHub Token 和本地路径的发布脚本，且该脚本不应分发给用户。Token 已暴露需立即轮换。

Install decision first Source: ClawHub Scanned: Jun 20, 2026
Files 12
Artifacts 14
Violations 0
Findings 4
Most direct threat evidence
Critical Credential Theft
硬编码 GitHub Personal Access Token

upload_to_github.py 第 7 行包含完整的 GitHub PAT (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)。该 Token 已随 skill 发布而公开暴露，任何人都可使用此 Token 访问 OWNER 的 GitHub 账户。

upload_to_github.py:7

Why this conclusion was reached

2/4 dimensions flagged
Pass
Declared vs actual capability

Declared resources and inferred behavior are broadly aligned.

Block
Hidden execution and egress

1 high-risk artifacts or egress signals were extracted.

Block
Attack chain and severe findings

The report includes 3 attack-chain steps and 3 severe findings.

Review
Dependencies and supply chain hygiene

Dependency information is incomplete, so supply-chain confidence stays limited.

Attack Chain

01
用户通过 ClawHub 安装 skill-publisher，收到包含 upload_to_github.py 的分发物

Entry · skill-card.md:1

02
用户读取 upload_to_github.py，发现硬编码的 GitHub Token

Escalation · upload_to_github.py:7

03
攻击者使用暴露的 Token 访问 GitHub 账户，创建仓库、推送代码或窃取私有资源

Impact · upload_to_github.py:7

What drove the risk score up

硬编码 GitHub Token +35

upload_to_github.py:7 包含真实 ghp_ TOKEN，已暴露给公众

本地路径泄露 +15

BASE_DIR 暴露 Windows 用户目录 d:\TRAE SOLO CN\...

分发物判定失败 +15

upload_to_github.py 是 maintainer tool，不应包含在分发物中，违反 security-audit.md 规则

Most important evidence

Critical Credential Theft

硬编码 GitHub Personal Access Token

upload_to_github.py 第 7 行包含完整的 GitHub PAT (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)。该 Token 已随 skill 发布而公开暴露，任何人都可使用此 Token 访问 OWNER 的 GitHub 账户。

upload_to_github.py:7
立即在 GitHub 设置中轮换此 Token，撤销旧 Token 并生成新 Token。删除脚本中的硬编码，改用环境变量或 gh CLI 认证。
High Sensitive Access

本地 Windows 路径泄露

upload_to_github.py 第 8 行包含绝对路径 'd:\TRAE SOLO CN\project\skill-publisher'，暴露了维护者的 Windows 用户目录结构。

upload_to_github.py:8
移除硬编码路径，改用相对路径或从环境变量获取工作目录。
High Supply Chain

Maintainer Tool 不应分发

upload_to_github.py 是发布脚本（maintainer tool），用于将 skill 发布到 GitHub。security-audit.md 明确规定 'publish_all.ps1 and similar scripts are maintainer tools — never include in distribution'，但此脚本被包含在分发物中。

upload_to_github.py:1
将 upload_to_github.py 添加到 .gitignore 和 ClawHub 分发排除列表。用户通过 clawhub install 安装 skill，不需要也不应获取发布脚本。
Medium Doc Mismatch

文档声明与实际行为不符

SKILL.md 声称执行安全扫描会阻止任何 FAIL，但 SKILL.md 自身包含 '本地路径' (BASE_DIR) 和 '危险命令' (base64 编码)。security-audit.md 定义了三层扫描规则，但 skill 本身未能通过这些检查。

SKILL.md:1
在发布前对 skill 自身执行完整的安全扫描，确保 SKILL.md 和 references/ 中不包含任何实际泄露值。

Declared capability vs actual capability

Network Pass
Declared READ
→
Inferred WRITE
SKILL.md: GitHub API calls via REST API
Filesystem Pass
Declared READ
→
Inferred WRITE
SKILL.md: generates repo files, read_local_file()

Suspicious artifacts and egress

Critical API Key
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

upload_to_github.py:7

Medium External URL
https://img.shields.io/github/stars/EdwardWason/skill-publisher?style=flat-square

README.en.md:5

Medium External URL
https://img.shields.io/badge/license-MIT--0-green?style=flat-square

README.en.md:6

Medium External URL
https://img.shields.io/badge/ClawHub-skill--publisher-orange?style=flat-square

README.en.md:7

Medium External URL
https://clawhub.ai/skills/skill-publisher

README.en.md:7

Medium External URL
https://img.shields.io/badge/Claude%20Code-Skill-blue?style=flat-square

README.en.md:8

Medium External URL
https://img.shields.io/github/stars/

references/repo-structure.md:64

Medium External URL
https://img.shields.io/badge/ClawHub-

references/repo-structure.md:66

Medium External URL
https://clawhub.ai/skills/

references/repo-structure.md:66

Medium External URL
https://evil.com/collect?data=...

references/security-audit.md:50

Medium External URL
https://clawhub.ai/user/edwardwason

skill-card.md:7

Medium External URL
https://clawhub.ai/edwardwason/skill-publisher-ai

skill-card.md:27

Dependencies and supply chain

There are no structured dependency warnings.

File composition

12 files · 2486 lines
Markdown 10 files · 2301 linesPython 1 files · 180 linesJSON 1 files · 5 lines
Files of concern · 7
SKILL.md Markdown · 343 lines
文档声明与实际行为不符
references/repo-structure.md Markdown · 471 lines
https://img.shields.io/github/stars/ · https://img.shields.io/badge/ClawHub- · https://clawhub.ai/skills/
references/publish-procedures.md Markdown · 387 lines
[email protected]
README.en.md Markdown · 192 lines
https://img.shields.io/github/stars/EdwardWason/skill-publisher?style=flat-square · https://img.shields.io/badge/license-MIT--0-green?style=flat-square · https://img.shields.io/badge/ClawHub-skill--publisher-orange?style=flat-square · https://clawhub.ai/skills/skill-publisher · https://img.shields.io/badge/Claude%20Code-Skill-blue?style=flat-square
upload_to_github.py Python · 180 lines
硬编码 GitHub Personal Access Token · 本地 Windows 路径泄露 · Maintainer Tool 不应分发 · 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
references/security-audit.md Markdown · 151 lines
https://evil.com/collect?data=... · [email protected]
skill-card.md Markdown · 45 lines
https://clawhub.ai/user/edwardwason · https://clawhub.ai/edwardwason/skill-publisher-ai
Other files · changelog-generation.md · README.md · change-detection.md · CHANGELOG.md · _meta.json

Security positives

skill-card.md 已声明 Known Risks 并提供 Mitigation 建议
security-audit.md 定义了完善的安全扫描流程和分发物判定规则
SKILL.md 明确禁止凭证泄露扫描（包含 token|api_key|ghp_ 等模式）