中文 EN
Start Review
Skill Trust Decision

git-monitor

Git 项目监控工具，代码功能与文档声明基本一致，存在潜在命令注入风险但无主动恶意行为证据

Install decision first Source: ClawHub Scanned: Apr 6, 2026
Files 8
Artifacts 7
Violations 0
Findings 3

Why this conclusion was reached

0/4 dimensions flagged
Pass
Declared vs actual capability

Declared resources and inferred behavior are broadly aligned.

Review
Hidden execution and egress

7 lower-risk artifacts were extracted and still need context.

Pass
Attack chain and severe findings

There is no explicit malicious chain in the report.

Review
Dependencies and supply chain hygiene

Dependency information is incomplete, so supply-chain confidence stays limited.

What drove the risk score up

潜在命令注入风险 +15

git函数拼接用户输入参数，建议使用数组形式

权限声明宽泛 +10

允许Bash/Read/Write但实际使用受限

Most important evidence

Medium RCE

潜在命令注入风险

checkRepository函数中git命令使用字符串拼接方式构建参数，用户输入的仓库URL虽经parseRepoInput解析，但仍存在风险

helper.js:198
使用数组形式传参：execFileSync('git', args, {...})，避免shell解析
Low Supply Chain

无依赖版本锁定

package.json为空对象，无生产依赖但也无版本锁定策略

package.json:1
当前仅使用Node.js内置模块，风险可控
Info Sensitive Access

读取飞书凭证

级联读取飞书凭证（环境变量/OpenClaw配置/本地config），凭证仅用于发送通知，未外传

helper.js:43
确认凭证用途符合预期

Declared capability vs actual capability

Filesystem Pass
Declared WRITE
→
Inferred WRITE
helper.js:19 读写config.json
Shell Pass
Declared WRITE
→
Inferred WRITE
helper.js:198-201 execSync执行git命令
Network Pass
Declared READ
→
Inferred WRITE
helper.js:77-107 发送飞书通知
Environment Pass
Declared READ
→
Inferred READ
helper.js:43-46 读取飞书凭证环境变量
Skill Invoke Pass
Declared NONE
→
Inferred NONE
无子技能调用

Suspicious artifacts and egress

Medium External URL
https://gitee.com/mindspore/mindspore

README.md:27

Medium External URL
https://open.feishu.cn/

README.md:64

Medium External URL
https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal

helper.js:105

Medium External URL
https://open.feishu.cn/open-apis/im/v1/messages

helper.js:118

Medium External URL
https://gitlab.com

helper.js:191

Medium External URL
https://gitee.com

helper.js:192

Medium External URL
https://gitee.com/owner/repo

helper.js:579

Dependencies and supply chain

There are no structured dependency warnings.

File composition

8 files · 1025 lines
JavaScript 1 files · 694 linesMarkdown 2 files · 193 linesShell 1 files · 87 linesJSON 4 files · 51 lines
Files of concern · 4
config.json JSON · 31 lines
helper.js JavaScript · 694 lines
潜在命令注入风险 · 读取飞书凭证 · https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal · https://open.feishu.cn/open-apis/im/v1/messages · https://gitlab.com · https://gitee.com · https://gitee.com/owner/repo
README.md Markdown · 64 lines
https://gitee.com/mindspore/mindspore · https://open.feishu.cn/
package.json JSON · 6 lines
无依赖版本锁定
Other files · SKILL.md · monitor.sh · config.local.json · _meta.json

Security positives

功能与文档声明一致，无阴影功能
飞书通知使用官方API（open.feishu.cn），凭证用于通知而非外泄
Git仓库存储在专用目录~/.openclaw/workspace/repos/，与系统敏感目录隔离
配置文件存储在技能目录内，不在全局路径
无Base64编码、eval调用或混淆代码
无远程脚本下载或shell管道执行