中文 EN
Start Review
Skill Trust Decision

dataify-brand-monitoring

品牌监控工具，代码存在文档未声明的阴影功能（文件写入、subprocess调用、环境变量访问），但功能本身合法且符合业务场景，无恶意指标

Install decision first Source: ClawHub Scanned: Sep 4, 2026
Files 4
Artifacts 3
Violations 3
Findings 3

Why this conclusion was reached

1/4 dimensions flagged
Block
Declared vs actual capability

3 undeclared or violating capabilities were inferred.

Review
Hidden execution and egress

3 lower-risk artifacts were extracted and still need context.

Pass
Attack chain and severe findings

There is no explicit malicious chain in the report.

Review
Dependencies and supply chain hygiene

Dependency information is incomplete, so supply-chain confidence stays limited.

What drove the risk score up

未声明的文件写入 +10

SKILL.md未提及会创建state.json/report.json/report.md/raw/等文件

未声明的subprocess调用 +8

代码调用subprocess执行其他技能脚本，SKILL.md仅提及run_brand_monitoring.py

未声明的环境变量访问 +7

访问DATAIFY_API_TOKEN但SKILL.md未声明

Most important evidence

Low Doc Mismatch

文件写入功能未在文档声明

代码会在执行目录创建state.json、report.json、report.md和raw/子目录，但SKILL.md仅提及run_brand_monitoring.py脚本，未说明会写文件

scripts/business_workflow.py:179
在SKILL.md的Workflow部分补充说明会创建本地状态和报告文件
Low Doc Mismatch

subprocess调用未在文档声明

代码通过subprocess调用其他技能脚本(serp-google-*/scraper-*等)，SKILL.md仅声称使用run_brand_monitoring.py

scripts/business_workflow.py:117
补充说明会调用相关Dataify技能执行搜索和抓取
Low Doc Mismatch

环境变量访问未在文档声明

代码读取DATAIFY_API_TOKEN环境变量进行API认证，但SKILL.md未声明需要此环境变量

scripts/business_workflow.py:184
在Account handling部分明确声明DATAIFY_API_TOKEN环境变量需求

Declared capability vs actual capability

Filesystem Block
Declared READ
→
Inferred WRITE
scripts/business_workflow.py:179-181
Shell Block
Declared NONE
→
Inferred WRITE
scripts/business_workflow.py:117-118
Environment Block
Declared NONE
→
Inferred READ
scripts/business_workflow.py:184
Network Pass
Declared READ
→
Inferred READ
scripts/business_workflow.py:143-162

Suspicious artifacts and egress

Medium External URL
https://dashboard.dataify.com/login?utm_source=skill

SKILL.md:50

Medium External URL
https://scraperapi.dataify.com/request

scripts/business_workflow.py:152

Medium External URL
https://webunlocker.dataify.com/request

scripts/business_workflow.py:161

Dependencies and supply chain

There are no structured dependency warnings.

File composition

4 files · 514 lines
Python 2 files · 452 linesMarkdown 1 files · 55 linesYAML 1 files · 7 lines
Files of concern · 2
scripts/business_workflow.py Python · 441 lines
文件写入功能未在文档声明 · subprocess调用未在文档声明 · 环境变量访问未在文档声明 · https://scraperapi.dataify.com/request · https://webunlocker.dataify.com/request
SKILL.md Markdown · 55 lines
https://dashboard.dataify.com/login?utm_source=skill
Other files · openai.yaml · run_brand_monitoring.py

Security positives

使用标准库，无第三方依赖风险
网络请求目标明确为Dataify官方API
功能逻辑清晰，为合法的品牌监控业务
有dry-run模式支持安全测试
有max-actions参数限制执行范围
无凭证收割、远程代码执行、Base64混淆等恶意指标