安全决策报告
smyx-environmental-anomaly-analysis
This is a legitimate livestock barn environmental analysis skill with documented network access and local identity storage. The main concern is undocumented local database writes for user identity management.
为什么得出这个结论
0/4 个维度触发 通过
声明与实际能力
声明资源与推断能力基本一致。
复核
隐藏执行与外联
提取到 12 个一般风险产物，需要结合上下文判断。
通过
攻击链与高危发现
没有形成明确的恶意路径。
复核
依赖与供应链卫生
发现 4 项需要关注的依赖或供应链线索。
风险分是怎么被拉高的
Undocumented local database writes +12
Creates SQLite database 'smyx-common-claw.db' in workspace data/ directory without explicit declaration in SKILL.md
Silent user identity creation +8
OpenIdUtil auto-generates User_xxxxxxxx default identities without user consent
Token storage in local database +2
API tokens stored in local SQLite; acknowledged in skill-card.md Known Risks
最关键的证据
低危 文档欺骗
Undocumented local SQLite database creation
SKILL.md does not mention that the skill creates a local SQLite database (smyx-common-claw.db) in the workspace data/ directory to store user identities and API tokens.
skills/smyx_common/scripts/dao.py:107 Document local database creation and storage of user tokens in SKILL.md privacy section
低危 文档欺骗
Silent automatic user identity generation
OpenIdUtil.get_or_create_default_open_id() automatically generates a User_xxxxxxxx identity when no explicit identity is provided. This automatic identity creation is not declared in SKILL.md.
skills/smyx_common/scripts/util.py:285 Document automatic identity generation behavior or require explicit user consent
提示 权限提升
Commented-out subprocess capability
skills/smyx_common/scripts/skill.py contains a commented-out ai_chat() method that would execute 'openclaw agent' commands via subprocess. This is not executed but represents potential shell execution capability.
skills/smyx_common/scripts/skill.py:32 Remove commented-out subprocess code if not needed to avoid confusion
声明能力 vs 实际能力
网络访问 通过
声明 READ
→ 推断 READ
SKILL.md declares API calls to lifeemergence.com for analysis 文件系统 通过
声明 READ
→ 推断 WRITE
dao.py:107 - Creates SQLite database; output file writes declared in SKILL.md 环境变量 通过
声明 NONE
→ 推断 READ
config.py:147-152 - Reads OPENCLAW_SENDER_OPEN_ID, OPENCLAW_SENDER_USERNAME, FEISHU_OPEN_ID 命令执行 通过
声明 NONE
→ 推断 NONE
subprocess.run() calls are commented out in skill.py:32-43 可疑产物与外联
中危 外部 URL
https://lifeemergence.com/sample.html SKILL.md:29
中危 外部 URL
https://clawhub.ai/user/18072937735 skill-card.md:9
中危 外部 URL
https://clawhub.ai/18072937735/skills/smyx-environmental-anomaly-analysis skill-card.md:35
中危 外部 URL
http://192.168.1.234:9601/smyx-open-api skills/smyx_common/scripts/config-dev.yaml:2
中危 外部 URL
http://192.168.1.234:4100 skills/smyx_common/scripts/config-dev.yaml:3
中危 外部 URL
http://192.168.1.234:7070/jeecg-boot-xzgz skills/smyx_common/scripts/config-dev.yaml:4
中危 外部 URL
https://livemonitortest.lifeemergence.com/smyx-open-api skills/smyx_common/scripts/config-test.yaml:2
中危 外部 URL
http://livemonitortest.lifeemergence.com skills/smyx_common/scripts/config-test.yaml:3
中危 外部 URL
https://healthtest.lifeemergence.com/jeecg-boot-xzgz skills/smyx_common/scripts/config-test.yaml:4
中危 外部 URL
https://lifeemergence.com/jeecg-boot-xzgz skills/smyx_common/scripts/config.yaml:4
中危 外部 URL
https://open.lifeemergence.com/smyx-open-api skills/smyx_common/scripts/config.yaml:5
中危 外部 URL
http://livemonitor.lifeemergence.com skills/smyx_common/scripts/config.yaml:6
依赖与供应链
| 包名 | 版本 | 来源 | 漏洞 | 备注 |
|---|---|---|---|---|
| pydash | 8.0.6 | pip | 否 | Version pinned |
| SQLAlchemy | 2.0.46 | pip | 否 | Version pinned |
| PyYAML | 6.0.3 | pip | 否 | Version pinned |
| requests | >=2.28.0 | pip | 否 | Minimum version specified, not upper-bound pinned |
文件构成
31 个文件 · 2760 行
Python 18 个文件 · 2363 行Markdown 4 个文件 · 357 行YAML 6 个文件 · 29 行Text 2 个文件 · 6 行JSON 1 个文件 · 5 行
需关注文件 · 5
skills/smyx_common/scripts/util.py Silent automatic user identity generation
skills/smyx_common/scripts/dao.py Undocumented local SQLite database creation
SKILL.md https://lifeemergence.com/sample.html
skills/smyx_common/scripts/skill.py Commented-out subprocess capability
skill-card.md https://clawhub.ai/user/18072937735 · https://clawhub.ai/18072937735/skills/smyx-environmental-anomaly-analysis
其他文件 · config.py · skill.py · smyx_analysis.py · smyx_environmental_anomaly_analysis.py · api_service.py · api_service.py +1
安全亮点
No actual shell command execution - subprocess.run() calls are fully commented out
No credential harvesting - only reads predefined environment variables for config
No obfuscation - all code is plaintext Python
No base64 encoding or eval() patterns
No unauthorized sensitive path access (~/.ssh, ~/.aws, .env)
No curl|bash or wget|sh remote script execution
No data exfiltration to unauthorized third parties
skill-card.md explicitly documents Known Risks including identity creation and token storage
API endpoints are documented and consistent with declared functionality
SQLite database is properly scoped to workspace data/ directory
Dependencies are version-pinned (pydash==8.0.6, SQLAlchemy==2.0.46, PyYAML==6.0.3)