Skill Trust Decision
zappi
纯文档型技能，核心功能依赖外部下载的 sign.mjs 脚本，存在供应链风险和文档-执行分离
Why this conclusion was reached
0/4 dimensions flagged Pass
Declared vs actual capability
Declared resources and inferred behavior are broadly aligned.
Review
Hidden execution and egress
6 lower-risk artifacts were extracted and still need context.
Pass
Attack chain and severe findings
There is no explicit malicious chain in the report.
Review
Dependencies and supply chain hygiene
Dependency information is incomplete, so supply-chain confidence stays limited.
What drove the risk score up
供应链风险 - 外部脚本下载 +20
sign.mjs 从 pot.zappi.money 动态下载，代码未包含在包内，用户无法在执行前验证
文档-执行分离 +10
SKILL.md 描述的是文档，但实际执行的是外部 sign.mjs，两者存在语义鸿沟
无代码签名/哈希验证 +5
下载的脚本无版本锁定或完整性校验
Most important evidence
Medium Supply Chain
核心功能依赖外部动态下载的可执行脚本
此包不包含任何可执行代码。sign.mjs 作为核心签名组件从 https://pot.zappi.money/sign.mjs 动态下载，用户无法在执行前验证代码安全性。
SKILL.md:19 建议使用本地副本或添加 SRI (Subresource Integrity) 哈希验证
Low Doc Mismatch
文档描述与实际执行代码分离
SKILL.md 只包含操作指南，真正的签名逻辑在外部 sign.mjs 中。用户阅读 SKILL.md 无法了解实际执行的代码行为。
SKILL.md:1 考虑将 sign.mjs 核心代码纳入包内或提供源码托管地址供审查
Declared capability vs actual capability
Filesystem Pass
Declared WRITE
→ Inferred WRITE
SKILL.md:24 创建本地密钥文件 pot-ONCE.txt Network Pass
Declared READ
→ Inferred READ
SKILL.md:11,19,20 下载外部资源 Shell Pass
Declared WRITE
→ Inferred WRITE
SKILL.md:13 执行 node sign.mjs 命令 Suspicious artifacts and egress
Medium External URL
https://pot.zappi.money/skill.json SKILL.md:11
Medium External URL
https://pot.zappi.money/sign.mjs SKILL.md:19
Medium External URL
https://pot.zappi.money/SKILL.md SKILL.md:20
Medium External URL
https://pot.zappi.money/deposit?sparkAddress=spark1...&sourceChain=base&sourceAsset=USDC SKILL.md:30
Medium External URL
https://clawhub.ai/user/edogbeatz skill-card.md:9
Medium External URL
https://clawhub.ai/edogbeatz/skills/zappi skill-card.md:35
Dependencies and supply chain
There are no structured dependency warnings.
File composition
2 files · 98 lines
Markdown 2 files · 98 lines
Files of concern · 2
SKILL.md 核心功能依赖外部动态下载的可执行脚本 · 文档描述与实际执行代码分离 · https://pot.zappi.money/skill.json · https://pot.zappi.money/sign.mjs · https://pot.zappi.money/SKILL.md · https://pot.zappi.money/deposit?sparkAddress=spark1...&sourceChain=base&sourceAsset=USDC
skill-card.md https://clawhub.ai/user/edogbeatz · https://clawhub.ai/edogbeatz/skills/zappi
Security positives
设计理念合理：prepaid pot 而非 full wallet，避免资金外泄
明确声明 Do not POST seed to Zappi
文档清晰说明了风险和缓解措施
无本地恶意代码，包内仅包含文档