安全决策报告
dlazy-text-storyboard-script
This is a legitimate storyboard-script generation skill that wraps a third-party dLazy CLI for optional image/video generation; all significant capabilities (shell:WRITE, network:READ to api.dlazy.com/files.dlazy.com, API key storage in ~/.dlazy/config.json) are declared in SKILL.md and metadata, though the main SKILL.md contains an internal contradiction between its 'no image generation' disclaimer and its execution instructions that command CLI invocation.
为什么得出这个结论
0/4 个维度触发 通过
声明与实际能力
声明资源与推断能力基本一致。
复核
隐藏执行与外联
提取到 5 个一般风险产物，需要结合上下文判断。
通过
攻击链与高危发现
没有形成明确的恶意路径。
通过
依赖与供应链卫生
依赖结构存在，但暂未看到明显高危告警。
风险分是怎么被拉高的
Doc internal contradiction +10
SKILL.md 'Goals and Principles' says 'do not actually invoke tools to generate image/video/audio assets' but the 'CRITICAL EXECUTION INSTRUCTIONS' section explicitly commands running 'dlazy seedream-4.5 --prompt ...' CLI commands.
Version pin mismatch between files +5
SKILL.md metadata.clawdbot.install specifies '1.0.9' but the documentation body references '1.2.3' for npx and npm install commands.
API key stored on filesystem +5
Skill instructs saving the dLazy API key to ~/.dlazy/config.json; credential storage on disk is declared but worth monitoring.
最关键的证据
中危 文档欺骗
Internal documentation contradiction
SKILL.md 'Goals and Principles' section explicitly states 'This skill is only responsible for script generation; do not actually invoke tools to generate image/video/audio assets.' However, the 'CRITICAL EXECUTION INSTRUCTIONS' section at the bottom instructs the agent to execute terminal commands via the dLazy CLI (e.g., 'dlazy seedream-4.5 --prompt "..."'). This creates user confusion about the skill's actual scope.
SKILL.md:1 Remove the conflicting disclaimer or rephrase it to accurately reflect that the skill can optionally invoke the dLazy CLI for image generation with user confirmation.
低危 供应链
Version pin mismatch in metadata vs. documentation
The SKILL.md frontmatter metadata specifies install version '1.0.9' for the npm package, but the documentation body references '1.2.3' for npx invocations. Version inconsistencies could lead to unexpected behavior or confusion during installation.
SKILL.md:7 Ensure all version references are consistent across the SKILL.md metadata and documentation body.
低危 凭证窃取
API key storage in user config directory
The skill instructs to save the dLazy API key to ~/.dlazy/config.json. While this is standard CLI behavior, the skill does not verify the file permissions are appropriately restricted after writing. A misconfigured CLI could leave the credential world-readable.
SKILL.md:14 Document that users should verify their OS-level file permissions on ~/.dlazy/config.json restrict access to the current user only (mode 600).
声明能力 vs 实际能力
命令执行 通过
声明 WRITE
→ 推断 WRITE
SKILL.md:21 — 'npm install -g @dlazy/[email protected]'; SKILL.md:47 — 'dlazy seedream-4.5 --prompt ...' 网络访问 通过
声明 READ
→ 推断 READ
SKILL.md metadata: 'apiEndpoints: ["api.dlazy.com", "files.dlazy.com"]' 文件系统 通过
声明 WRITE
→ 推断 WRITE
SKILL.md:14 — stores API key to '~/.dlazy/config.json' 可疑产物与外联
中危 外部 URL
https://www.npmjs.com/package/@dlazy/cli SKILL-cn.md:7
中危 外部 URL
https://dlazy.com SKILL-cn.md:32
中危 外部 URL
https://dlazy.com/dashboard/organization/api-key SKILL-cn.md:33
中危 外部 URL
https://clawhub.ai/user/dlazyai skill-card.md:9
中危 外部 URL
https://clawhub.ai/dlazyai/skills/dlazy-text-storyboard-script skill-card.md:35
依赖与供应链
| 包名 | 版本 | 来源 | 漏洞 | 备注 |
|---|---|---|---|---|
| @dlazy/cli | 1.0.9 (metadata) / 1.2.3 (docs) | npm | 否 | Version mismatch between metadata install field and documentation body. Package not reviewed in this analysis — source at github.com/dlazy-ai/cli was not imported. |
文件构成
4 个文件 · 454 行
Markdown 3 个文件 · 449 行JSON 1 个文件 · 5 行
需关注文件 · 3
SKILL-cn.md https://www.npmjs.com/package/@dlazy/cli · https://dlazy.com · https://dlazy.com/dashboard/organization/api-key
SKILL.md Internal documentation contradiction · Version pin mismatch in metadata vs. documentation · API key storage in user config directory
skill-card.md https://clawhub.ai/user/dlazyai · https://clawhub.ai/dlazyai/skills/dlazy-text-storyboard-script
其他文件 · _meta.json
安全亮点
All shell execution is explicitly declared in SKILL.md via npm install, npx, and dlazy CLI commands
Network access is explicitly declared via metadata.apiEndpoints: api.dlazy.com and files.dlazy.com
skill-card.md contains proactive risk disclosures about CLI usage and data sharing
No obfuscation, base64-encoded payloads, or hidden functionality observed
No credential harvesting beyond the skill's own API key (which is the user's own key)
No direct IP connections, reverse shells, or C2 communications detected
Source code repository (github.com/dlazy-ai/cli) is linked for review
Skill metadata includes alternative run method (npx) avoiding global installation