中文 EN
Start Review
Skill Trust Decision

wip-readme-format

合法的 README 格式化工具，存在已文档化的 deploy 模式命令注入风险，建议使用 --dry-run 模式规避

Install decision first Source: ClawHub Scanned: Jun 24, 2026
Files 6
Artifacts 4
Violations 0
Findings 3

Why this conclusion was reached

0/4 dimensions flagged
Pass
Declared vs actual capability

Declared resources and inferred behavior are broadly aligned.

Review
Hidden execution and egress

4 lower-risk artifacts were extracted and still need context.

Pass
Attack chain and severe findings

There is no explicit malicious chain in the report.

Pass
Dependencies and supply chain hygiene

Dependencies are present but no obvious high-risk issue stands out.

What drove the risk score up

deploy 模式存在命令注入风险 +15

execSync 直接拼接文件名到 git 命令，SKILL.md 已承认

文件修改和删除能力 +5

--deploy 模式可重写 README.md 和 TECHNICAL.md，但有备份机制

文档透明度 +-5

SKILL.md 明确标注了风险，属于已知缺陷而非隐藏威胁

Most important evidence

Medium RCE

Deploy 模式存在命令注入风险

execSync 直接拼接 README-init 文件名到 git status 命令，如果文件名包含特殊字符（如 `"` 或 shell 元字符）可能导致命令注入。开发者已在 SKILL.md 中承认此风险。

format.mjs:296
使用 --dry-run 或 --check 模式代替 --deploy；避免对来源不明的仓库使用 --deploy
Low Priv Escalation

文件删除和覆盖能力

--deploy 模式会删除 README-init-* 文件并覆盖 README.md、 TECHNICAL.md。虽然有备份机制（保存到 ai/_trash/），但仍属于高权限操作。

format.mjs:318
确保已 review 所有 README-init-* 文件后再执行 --deploy
Info Doc Mismatch

skill-card.md 与 SKILL.md 风险描述不一致

SKILL.md 的 Known Risks 部分详细描述了 shell 命令注入风险，但 skill-card.md 的 Known Risks and Mitigations 重复了该描述，格式略有不同。这不是安全问题但影响可读性。

skill-card.md vs SKILL.md
确保风险描述在所有文档中保持一致

Declared capability vs actual capability

Filesystem Pass
Declared WRITE
→
Inferred WRITE
SKILL.md 声明写入 README.md，代码实现 writeFileSync
Shell Pass
Declared NONE
→
Inferred READ
format.mjs:296 使用 execSync 执行 git 命令
Network Pass
Declared NONE
→
Inferred NONE
无网络请求代码
Environment Pass
Declared NONE
→
Inferred NONE
无环境变量遍历
credential_access Pass
Declared NONE
→
Inferred NONE
无凭证收割代码

Suspicious artifacts and egress

Medium External URL
https://img.shields.io/badge/interface-$

format.mjs:82

Medium External URL
https://img.shields.io/badge/Universal_Interface_Spec-black?style=flat&color=black

format.mjs:506

Medium External URL
https://clawhub.ai/user/parkertoddbrooks

skill-card.md:7

Medium External URL
https://clawhub.ai/parkertoddbrooks/wip-readme-format

skill-card.md:27

Dependencies and supply chain

PackageVersionSourceKnown vulnNotes
node:fs built-in Node.js No 标准库
node:path built-in Node.js No 标准库
node:child_process built-in Node.js No 标准库，仅在 deploy 模式动态导入

File composition

6 files · 791 lines
JavaScript 1 files · 597 linesMarkdown 3 files · 174 linesJSON 2 files · 20 lines
Files of concern · 2
format.mjs JavaScript · 597 lines
Deploy 模式存在命令注入风险 · 文件删除和覆盖能力 · https://img.shields.io/badge/interface-$ · https://img.shields.io/badge/Universal_Interface_Spec-black?style=flat&color=black
skill-card.md Markdown · 41 lines
https://clawhub.ai/user/parkertoddbrooks · https://clawhub.ai/parkertoddbrooks/wip-readme-format
Other files · SKILL.md · README.md · package.json · _meta.json

Security positives

代码结构清晰，无混淆或隐蔽行为
SKILL.md 主动披露了安全风险，体现了开发者透明度
提供 --dry-run 模式允许安全预览
有备份机制（ai/_trash/），可恢复误操作
功能单一，代码量适中（597 行），可审计性良好
无恶意依赖，package.json 干净