Skill Trust Decision
superada-workflow-entity-mission-control-bootstrap
纯元数据技能，下载并执行外部仓库代码，供应链风险极高
Most direct threat evidence
Critical Supply Chain
外部仓库代码执行 install-auto.sh从github.com/h-mascot/enterprise-crew-skills下载执行，该脚本内容未包含在技能包中无法预先审查
SKILL.md:18 Why this conclusion was reached
2/4 dimensions flagged Block
Declared vs actual capability
2 undeclared or violating capabilities were inferred.
Review
Hidden execution and egress
1 lower-risk artifacts were extracted and still need context.
Block
Attack chain and severe findings
The report includes 4 attack-chain steps and 3 severe findings.
Review
Dependencies and supply chain hygiene
Dependency information is incomplete, so supply-chain confidence stays limited.
Attack Chain
01
用户安装该SKILL.md技能包
Entry · SKILL.md:18
02
从github.com/h-mascot下载代码仓库
Escalation · SKILL.md:18
03
执行install-auto.sh，可能包含恶意操作
Escalation · SKILL.md:18
04
代码在目标系统获得shell执行权限并可能持久化
Impact · SKILL.md:18
What drove the risk score up
外部仓库代码执行 +35
install-auto.sh从github.com/h-mascot下载执行，未包含实际代码供审查
供应链信任声明 +20
使用'Canonical source bundle'等措辞试图建立信任，但不可验证
文档-行为分离 +10
SKILL.md描述的功能与实际下载执行的代码完全分离
Most important evidence
Critical Supply Chain
外部仓库代码执行
install-auto.sh从github.com/h-mascot/enterprise-crew-skills下载执行，该脚本内容未包含在技能包中无法预先审查
SKILL.md:18 禁止安装。应要求提交者提供install-auto.sh的完整代码内容以供安全审查
High RCE
远程脚本直接执行
bash skills/entity-mc/install-auto.sh直接执行下载的shell脚本，无沙箱或验证
SKILL.md:18 不应直接执行远程脚本
High Doc Mismatch
元数据技能伪装
该技能仅包含SKILL.md元数据，实际危险行为发生在外部仓库代码中，形成文档-行为分离
SKILL.md:1 技能应包含实际代码，不应作为外部代码的代理安装器
Medium Priv Escalation
cron条目写入
文档提到写入auto-pull和stall-check cron条目，具有持久化能力
SKILL.md:31 检查cron条目内容确保无恶意持久化
Declared capability vs actual capability
Filesystem Pass
Declared NONE
→ Inferred WRITE
install-auto.sh会写入skills目录 Shell Block
Declared NONE
→ Inferred WRITE
bash install-auto.sh直接执行外部脚本 Environment Block
Declared NONE
→ Inferred READ
install-auto.sh可能读取敏感环境变量 Pass
Declared —
→ Inferred —
— Suspicious artifacts and egress
Medium External URL
https://superada.ai/workflows/entity-mission-control-bootstrap/ SKILL.md:11
Dependencies and supply chain
There are no structured dependency warnings.
File composition
1 files · 41 lines
Markdown 1 files · 41 lines
Files of concern · 1
SKILL.md 外部仓库代码执行 · 远程脚本直接执行 · 元数据技能伪装 · cron条目写入 · https://superada.ai/workflows/entity-mission-control-bootstrap/
Security positives
No explicit security positives were supplied.