中文 EN
Start Review
Skill Trust Decision

浙江企业工商信息查询（按名核验）

企业工商查询工具，代码与声明基本一致，但硬编码IP(110.40.221.75:13479)绕过DNS、使用非标准端口、凭据+查询数据外传，透明度不足。

Install decision first Source: ClawHub Scanned: 15 days ago
Files 4
Artifacts 5
Violations 0
Findings 3
Most direct threat evidence
High IP Address
110.40.221.75

Why this conclusion was reached

1/4 dimensions flagged
Pass
Declared vs actual capability

Declared resources and inferred behavior are broadly aligned.

Block
Hidden execution and egress

1 high-risk artifacts or egress signals were extracted.

Pass
Attack chain and severe findings

There is no explicit malicious chain in the report.

Review
Dependencies and supply chain hygiene

Dependency information is incomplete, so supply-chain confidence stays limited.

What drove the risk score up

硬编码裸IP网络请求 +20

使用110.40.221.75绕过DNS解析，非标准端口13479，SKILL.md仅含糊声明为"数据接口地址"

凭据随查询数据外传 +15

API_KEY、install_id、cookies随企业名查询一起POST到外部IP，存在数据外泄风险

凭据明文存储 +10

~/.odf/zj-enterprise-registry.json存储API_KEY和cookies，明文JSON，无加密

Most important evidence

Medium Sensitive Access

硬编码IP绕过DNS透明度

代码硬编码110.40.221.75:13479作为API端点，SKILL.md仅声明"数据接口地址（HTTPS）"。使用裸IP而非域名，绕过标准DNS安全机制（如DANE、Certificate Transparency），用户无法验证服务器身份。

scripts/run.mjs:7
改用域名并在SKILL.md中明确声明完整端点域名，支持用户做证书校验。
Medium Data Exfil

凭据随查询内容外传至第三方IP

每次查询时将API_KEY(Authorization头)、install_id(X-Install-Id头)、cookies(Cookie头)与用户输入的企业名一起发送到外部IP。查询企业名称本身即敏感信息，结合身份凭据批量收集构成数据外泄风险。

scripts/run.mjs:36
明确告知用户查询行为会携带身份标识，建议提供本地离线模式或数据最小化选项。
Low Credential Theft

凭据明文存储于本地文件

API_KEY和session cookies以明文JSON存入~/.odf/zj-enterprise-registry.json，无加密保护。共享机器或恶意软件可直读。

scripts/run.mjs:14
使用系统密钥链（keychain/credential manager）存储敏感凭据。

Declared capability vs actual capability

Network Pass
Declared READ
→
Inferred WRITE
scripts/run.mjs:7,36 凭据+查询内容发送到外部IP
Filesystem Pass
Declared WRITE
→
Inferred WRITE
scripts/run.mjs:14-16 读写~/.odf/
Shell Pass
Declared WRITE
→
Inferred WRITE
SKILL.md:10 声明Bash执行脚本

Suspicious artifacts and egress

High IP Address
110.40.221.75

scripts/run.mjs:7

Medium External URL
https://110.40.221.75:13479/factory

scripts/run.mjs:7

Medium External URL
https://110.40.221.75:13479/factory/buy/zj-registry

scripts/run.mjs:10

Medium External URL
https://clawhub.ai/user/chenqg618

skill-card.md:9

Medium External URL
https://clawhub.ai/chenqg618/skills/zj-enterprise-registry

skill-card.md:35

Dependencies and supply chain

There are no structured dependency warnings.

File composition

4 files · 220 lines
JavaScript 1 files · 103 linesMarkdown 2 files · 101 linesJSON 1 files · 16 lines
Files of concern · 2
scripts/run.mjs JavaScript · 103 lines
硬编码IP绕过DNS透明度 · 凭据随查询内容外传至第三方IP · 凭据明文存储于本地文件 · 110.40.221.75 · https://110.40.221.75:13479/factory · https://110.40.221.75:13479/factory/buy/zj-registry
skill-card.md Markdown · 53 lines
https://clawhub.ai/user/chenqg618 · https://clawhub.ai/chenqg618/skills/zj-enterprise-registry
Other files · SKILL.md · manifest.json

Security positives

代码逻辑清晰，无混淆或隐藏执行路径
SKILL.md与代码能力基本对应，无严重影子功能
错误处理完善，不转达远端指令（防命令注入）
skill-card.md已知风险并提供缓解措施