Skill Trust Decision

smyx-crop-specific-disease-analysis

Name: smyx-crop-specific-disease-analysis Trust Review Report
Item: smyx-crop-specific-disease-analysis
Rating: 72
Author: ClawSafe

经济作物病害识别技能，代码结构清晰，但存在未声明的本地凭证存储机制和环境变量访问行为。

Install decision first Source: ClawHub Scanned: Aug 18, 2026

Files 29

Artifacts 10

Violations 2

Findings 5

Why this conclusion was reached

1/4 dimensions flagged

Block

Declared vs actual capability

2 undeclared or violating capabilities were inferred.

Review

Hidden execution and egress

10 lower-risk artifacts were extracted and still need context.

Pass

Attack chain and severe findings

There is no explicit malicious chain in the report.

Review

Dependencies and supply chain hygiene

1 dependency or supply-chain issues need attention.

What drove the risk score up

未声明的本地凭证存储 +10

SKILL.md未声明使用SQLite存储用户token/open_token

未声明的环境变量访问 +8

读取OPENCLAW_SENDER_OPEN_ID等环境变量未在文档中声明

自动用户注册行为 +5

OpenIdUtil自动创建User_开头的默认用户并注册登录

依赖无版本锁定 +5

requests>=2.28.0使用浮动版本

Most important evidence

Medium Credential Theft

本地SQLite数据库存储敏感凭证

dao.py将用户token、open_token等敏感凭证明文存储在SQLite数据库中。虽然路径被重定向到工作区data目录，但数据库文件本身未经加密。

skills/smyx_common/scripts/dao.py:49

建议对存储的凭证进行加密或使用平台安全的凭证存储机制

Medium Doc Mismatch

未声明的自动用户创建与注册行为

OpenIdUtil.resolve_current_open_id()在未提供open_id时，自动生成User_开头的用户名，调用/sys/phoneLogin接口注册并登录系统。SKILL.md未声明此行为。

skills/smyx_common/scripts/util.py:296

在SKILL.md中明确说明自动用户创建机制，或提供禁用选项

Medium Sensitive Access

未声明的环境变量读取行为

config.py的init()方法读取多个环境变量(OPENCLAW_SENDER_OPEN_ID, OPENCLAW_SENDER_USERNAME, FEISHU_OPEN_ID)，但SKILL.md未声明此行为。

skills/smyx_common/scripts/config.py:98

在SKILL.md的隐私与数据安全声明中补充说明读取的环境变量列表

Low Supply Chain

依赖包无版本锁定

smyx_analysis/requirements.txt中requests>=2.28.0使用浮动版本，可能引入依赖安全风险。

skills/smyx_analysis/requirements.txt:1

建议锁定具体版本如requests==2.31.0

Low Credential Theft

API密钥明文配置

config.yaml中存储明文App-Id和API密钥。虽然这是框架设计模式的一部分，但建议使用环境变量或密钥管理服务。

skills/smyx_common/scripts/config.yaml:5

建议使用环境变量注入敏感配置

Declared capability vs actual capability

Filesystem Pass

Declared READ

→

Inferred WRITE

skills/smyx_analysis/scripts/smyx_analysis.py:63 读取本地文件用于分析

Network Pass

Declared READ

→

Inferred READ

skills/smyx_common/scripts/util.py:200 HTTP请求调用外部API

Environment Block

Declared NONE

→

Inferred READ

skills/smyx_common/scripts/config.py:98 读取OPENCLAW_SENDER_OPEN_ID等变量

Database Block

Declared NONE

→

Inferred WRITE

skills/smyx_common/scripts/dao.py:49 创建SQLite存储用户凭证

Suspicious artifacts and egress

Medium External URL

https://lifeemergence.com/sample.html

SKILL.md:29

Medium External URL

http://192.168.1.234:9601/smyx-open-api

skills/smyx_common/scripts/config-dev.yaml:2

Medium External URL

http://192.168.1.234:4100

skills/smyx_common/scripts/config-dev.yaml:3

Medium External URL

http://192.168.1.234:7070/jeecg-boot-xzgz

skills/smyx_common/scripts/config-dev.yaml:4

Medium External URL

https://livemonitortest.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config-test.yaml:2

Medium External URL

http://livemonitortest.lifeemergence.com

skills/smyx_common/scripts/config-test.yaml:3

Medium External URL

https://healthtest.lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config-test.yaml:4

Medium External URL

https://lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config.yaml:4

Medium External URL

https://open.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config.yaml:5

Medium External URL

http://livemonitor.lifeemergence.com

skills/smyx_common/scripts/config.yaml:6

Dependencies and supply chain

Package	Version	Source	Known vuln	Notes
requests	`>=2.28.0`	pip	No	无版本锁定
pydash	`8.0.6`	pip	No	已锁定版本
SQLAlchemy	`2.0.46`	pip	No	已锁定版本
PyYAML	`6.0.3`	pip	No	已锁定版本

File composition

29 files · 2711 lines

Python 18 files · 2363 linesMarkdown 3 files · 313 linesYAML 6 files · 29 linesText 2 files · 6 lines

Files of concern · 4

skills/smyx_common/scripts/util.py Python · 718 lines

未声明的自动用户创建与注册行为

skills/smyx_common/scripts/config.py Python · 399 lines

未声明的环境变量读取行为

skills/smyx_common/scripts/dao.py Python · 499 lines

本地SQLite数据库存储敏感凭证

SKILL.md Markdown · 274 lines

https://lifeemergence.com/sample.html

Other files · skill.py · smyx_analysis.py · smyx_crop_specific_disease_analysis.py · api_service.py · skill.py · api_service.py +2

29 files · 107.5 KB · 2711 lines

Python 18f · 2363LMarkdown 3f · 313LYAML 6f · 29LText 2f · 6L

├─ ▾ 📁 references

│ └─ 📝 api_doc.md Markdown 20L · 671 B

├─ ▾ 📁 scripts

│ ├─ 🐍 __init__.py Python 1L · 49 B

│ ├─ 🐍 config.py Python 24L · 680 B

│ ├─ 📋 config.yaml YAML 1L · 3 B

│ ├─ 🐍 skill.py Python 23L · 579 B

│ └─ 🐍 smyx_crop_specific_disease_analysis.py Python 102L · 3.5 KB

├─ ▾ 📁 skills

│ ├─ ▾ 📁 smyx_analysis

│ │ ├─ ▾ 📁 references

│ │ │ └─ 📝 api_doc.md Markdown 19L · 427 B

│ │ ├─ ▾ 📁 scripts

│ │ │ ├─ 🐍 __init__.py Python 0 B

│ │ │ ├─ 🐍 api_service.py Python 40L · 1.5 KB

│ │ │ ├─ 🐍 config.py Python 39L · 1003 B

│ │ │ ├─ 📋 config.yaml YAML 1L · 3 B

│ │ │ ├─ 🐍 skill.py Python 175L · 6.4 KB

│ │ │ └─ 🐍 smyx_analysis.py Python 115L · 3.7 KB

│ │ ├─ 🐍 __init__.py Python 0 B

│ │ └─ 📄 requirements.txt Text 3L · 45 B

│ └─ ▾ 📁 smyx_common

│ ├─ ▾ 📁 scripts

│ │ ├─ 🐍 __init__.py Python 9L · 177 B

│ │ ├─ 🐍 api_service.py Python 101L · 2.6 KB

│ │ ├─ 🐍 base.py Python 33L · 469 B

│ │ ├─ 📋 config-dev.yaml YAML 6L · 214 B

│ │ ├─ 📋 config-prod.yaml YAML 0 B

│ │ ├─ 📋 config-test.yaml YAML 6L · 256 B

│ │ ├─ 🐍 config.py Python 399L · 23.8 KB

│ │ ├─ 📋 config.yaml YAML 15L · 472 B

│ │ ├─ 🐍 dao.py Python 499L · 17.8 KB

│ │ ├─ 🐍 skill.py Python 85L · 2.4 KB

│ │ └─ 🐍 util.py Python 718L · 28.1 KB

│ ├─ 🐍 __init__.py Python 0 B

│ └─ 📄 requirements.txt Text 3L · 47 B

└─ 📝 SKILL.md Markdown 274L · 12.7 KB

Security positives

数据库路径重定向机制防止数据库文件污染技能目录

API请求超时设置合理(120秒)

文件大小和格式验证完善

代码结构清晰，模块化良好

敏感环境变量有隔离处理