Skill Trust Decision
smyx-environmental-anomaly-analysis
This is a legitimate livestock barn environmental analysis skill with documented network access and local identity storage. The main concern is undocumented local database writes for user identity management.
Why this conclusion was reached
0/4 dimensions flagged Pass
Declared vs actual capability
Declared resources and inferred behavior are broadly aligned.
Review
Hidden execution and egress
12 lower-risk artifacts were extracted and still need context.
Pass
Attack chain and severe findings
There is no explicit malicious chain in the report.
Review
Dependencies and supply chain hygiene
4 dependency or supply-chain issues need attention.
What drove the risk score up
Undocumented local database writes +12
Creates SQLite database 'smyx-common-claw.db' in workspace data/ directory without explicit declaration in SKILL.md
Silent user identity creation +8
OpenIdUtil auto-generates User_xxxxxxxx default identities without user consent
Token storage in local database +2
API tokens stored in local SQLite; acknowledged in skill-card.md Known Risks
Most important evidence
Low Doc Mismatch
Undocumented local SQLite database creation
SKILL.md does not mention that the skill creates a local SQLite database (smyx-common-claw.db) in the workspace data/ directory to store user identities and API tokens.
skills/smyx_common/scripts/dao.py:107 Document local database creation and storage of user tokens in SKILL.md privacy section
Low Doc Mismatch
Silent automatic user identity generation
OpenIdUtil.get_or_create_default_open_id() automatically generates a User_xxxxxxxx identity when no explicit identity is provided. This automatic identity creation is not declared in SKILL.md.
skills/smyx_common/scripts/util.py:285 Document automatic identity generation behavior or require explicit user consent
Info Priv Escalation
Commented-out subprocess capability
skills/smyx_common/scripts/skill.py contains a commented-out ai_chat() method that would execute 'openclaw agent' commands via subprocess. This is not executed but represents potential shell execution capability.
skills/smyx_common/scripts/skill.py:32 Remove commented-out subprocess code if not needed to avoid confusion
Declared capability vs actual capability
Network Pass
Declared READ
→ Inferred READ
SKILL.md declares API calls to lifeemergence.com for analysis Filesystem Pass
Declared READ
→ Inferred WRITE
dao.py:107 - Creates SQLite database; output file writes declared in SKILL.md Environment Pass
Declared NONE
→ Inferred READ
config.py:147-152 - Reads OPENCLAW_SENDER_OPEN_ID, OPENCLAW_SENDER_USERNAME, FEISHU_OPEN_ID Shell Pass
Declared NONE
→ Inferred NONE
subprocess.run() calls are commented out in skill.py:32-43 Suspicious artifacts and egress
Medium External URL
https://lifeemergence.com/sample.html SKILL.md:29
Medium External URL
https://clawhub.ai/user/18072937735 skill-card.md:9
Medium External URL
https://clawhub.ai/18072937735/skills/smyx-environmental-anomaly-analysis skill-card.md:35
Medium External URL
http://192.168.1.234:9601/smyx-open-api skills/smyx_common/scripts/config-dev.yaml:2
Medium External URL
http://192.168.1.234:4100 skills/smyx_common/scripts/config-dev.yaml:3
Medium External URL
http://192.168.1.234:7070/jeecg-boot-xzgz skills/smyx_common/scripts/config-dev.yaml:4
Medium External URL
https://livemonitortest.lifeemergence.com/smyx-open-api skills/smyx_common/scripts/config-test.yaml:2
Medium External URL
http://livemonitortest.lifeemergence.com skills/smyx_common/scripts/config-test.yaml:3
Medium External URL
https://healthtest.lifeemergence.com/jeecg-boot-xzgz skills/smyx_common/scripts/config-test.yaml:4
Medium External URL
https://lifeemergence.com/jeecg-boot-xzgz skills/smyx_common/scripts/config.yaml:4
Medium External URL
https://open.lifeemergence.com/smyx-open-api skills/smyx_common/scripts/config.yaml:5
Medium External URL
http://livemonitor.lifeemergence.com skills/smyx_common/scripts/config.yaml:6
Dependencies and supply chain
| Package | Version | Source | Known vuln | Notes |
|---|---|---|---|---|
| pydash | 8.0.6 | pip | No | Version pinned |
| SQLAlchemy | 2.0.46 | pip | No | Version pinned |
| PyYAML | 6.0.3 | pip | No | Version pinned |
| requests | >=2.28.0 | pip | No | Minimum version specified, not upper-bound pinned |
File composition
31 files · 2760 lines
Python 18 files · 2363 linesMarkdown 4 files · 357 linesYAML 6 files · 29 linesText 2 files · 6 linesJSON 1 files · 5 lines
Files of concern · 5
skills/smyx_common/scripts/util.py Silent automatic user identity generation
skills/smyx_common/scripts/dao.py Undocumented local SQLite database creation
SKILL.md https://lifeemergence.com/sample.html
skills/smyx_common/scripts/skill.py Commented-out subprocess capability
skill-card.md https://clawhub.ai/user/18072937735 · https://clawhub.ai/18072937735/skills/smyx-environmental-anomaly-analysis
Other files · config.py · skill.py · smyx_analysis.py · smyx_environmental_anomaly_analysis.py · api_service.py · api_service.py +1
Security positives
No actual shell command execution - subprocess.run() calls are fully commented out
No credential harvesting - only reads predefined environment variables for config
No obfuscation - all code is plaintext Python
No base64 encoding or eval() patterns
No unauthorized sensitive path access (~/.ssh, ~/.aws, .env)
No curl|bash or wget|sh remote script execution
No data exfiltration to unauthorized third parties
skill-card.md explicitly documents Known Risks including identity creation and token storage
API endpoints are documented and consistent with declared functionality
SQLite database is properly scoped to workspace data/ directory
Dependencies are version-pinned (pydash==8.0.6, SQLAlchemy==2.0.46, PyYAML==6.0.3)