中文 EN
Start Review
Skill Trust Decision

getnote

得到大脑笔记管理技能，功能声明与实现一致，无恶意行为，但存在供应链版本锁定缺失和远程更新的中等风险。

Install decision first Source: ClawHub Scanned: Aug 14, 2026
Files 8
Artifacts 0
Violations 0
Findings 3

Why this conclusion was reached

0/4 dimensions flagged
Pass
Declared vs actual capability

Declared resources and inferred behavior are broadly aligned.

Pass
Hidden execution and egress

No obvious high-risk egress or execution signals were found.

Pass
Attack chain and severe findings

There is no explicit malicious chain in the report.

Review
Dependencies and supply chain hygiene

1 dependency or supply-chain issues need attention.

What drove the risk score up

npm 依赖无版本锁定 +10

install.sh 第62行使用 @latest，可能拉取恶意更新

远程包替换本地文件 +10

--update 模式从 GitHub 下载 ZIP 覆盖 SKILL.md 和 references/，无签名验证

Most important evidence

Medium Supply Chain

npm 依赖版本未锁定

install.sh 使用 @getnote/cli@latest 安装依赖，存在依赖混淆或恶意版本注入风险。若 npm registry 或包被攻击，用户下次安装可能获取恶意版本。

scripts/install.sh:62
使用精确版本或版本范围：@getnote/cli@^2.0.0
Medium Supply Chain

远程包无完整性验证即覆盖本地文件

--update 模式从 GitHub releases 下载 ZIP 并直接覆盖 SKILL.md 和 references/，无签名或哈希验证。若 release 被篡改，攻击者可替换任意内容。

scripts/install.sh:112
在替换前验证包签名或 SHA256 哈希
Low Sensitive Access

网络请求使用裸 IP 风险

install.sh 从 api.github.com 获取 release 信息，无额外安全验证。

scripts/install.sh:26
可接受，但建议增加 HTTPS 证书验证

Declared capability vs actual capability

Filesystem Pass
Declared WRITE
→
Inferred WRITE
scripts/install.sh:62 npm install -g
Network Pass
Declared READ
→
Inferred WRITE
scripts/install.sh:92 curl 下载 GitHub release
Shell Pass
Declared ADMIN
→
Inferred ADMIN
scripts/install.sh:62 npm install -g
Environment Pass
Declared NONE
→
Inferred NONE
无访问环境变量收割凭证

Suspicious artifacts and egress

No obvious IOC was extracted.

Dependencies and supply chain

PackageVersionSourceKnown vulnNotes
@getnote/cli latest npm No 无版本锁定，存在供应链风险

File composition

8 files · 628 lines
Markdown 6 files · 467 linesShell 1 files · 141 linesOther 1 files · 20 lines
Files of concern · 1
scripts/install.sh Shell · 141 lines
npm 依赖版本未锁定 · 远程包无完整性验证即覆盖本地文件 · 网络请求使用裸 IP 风险
Other files · kb.md · SKILL.md · note.md · auth.md · search.md · tag.md +1

Security positives

所有操作通过官方 getnote CLI 完成，无自定义网络请求
不索取 API Key、Cookie 或 Authorization
不访问 ~/.ssh、~/.aws、.env 等敏感路径
不包含 eval、atob、base64 解码等混淆技术
文档完整清晰，行为与声明一致
包含详细的错误处理和恢复流程
群聊场景有隐私保护意识（不展开私密全文）