Skill Trust Decision

smyx-root-health-transparent-pot-analysis

Name: smyx-root-health-transparent-pot-analysis Trust Review Report
Item: smyx-root-health-transparent-pot-analysis
Rating: 72
Author: ClawSafe

技能为植物根系健康分析工具，存在未声明的本地数据库写入和云端静默注册机制，但无直接恶意行为证据，属于可信范围。

Install decision first Source: ClawHub Scanned: Aug 23, 2026

Files 30

Artifacts 12

Violations 4

Findings 4

Why this conclusion was reached

1/4 dimensions flagged

Block

Declared vs actual capability

4 undeclared or violating capabilities were inferred.

Review

Hidden execution and egress

12 lower-risk artifacts were extracted and still need context.

Pass

Attack chain and severe findings

There is no explicit malicious chain in the report.

Pass

Dependencies and supply chain hygiene

Dependencies are present but no obvious high-risk issue stands out.

What drove the risk score up

文档欺骗-阴影功能 +10

SKILL.md未声明本地SQLite数据库写入、凭证持久化和云端静默注册行为

凭证收割-静默注册 +8

OpenIdUtil通过/sys/phoneLogin云端静默注册用户，未在文档声明

敏感信息存储 +5

API凭证(App-Id: x1a3s4nwy1s2r4se)和用户token存入本地SQLite数据库

依赖版本宽泛 +5

requests>=2.28.0无上限版本锁定

Most important evidence

Medium Doc Mismatch

未声明的本地数据库写入

技能在data/目录下创建SQLite数据库(smyx-common-claw.db)存储用户信息和凭证，但SKILL.md完全未提及此行为

skills/smyx_common/scripts/dao.py:86

在SKILL.md前置准备部分明确声明本地数据存储行为

Medium Credential Theft

云端静默注册机制未声明

OpenIdUtil在检测到本地无有效凭证时，自动调用/sys/phoneLogin接口进行云端静默注册，使用随机生成的User_xxx用户名

skills/smyx_common/scripts/util.py:195

在SKILL.md明确告知用户会自动创建云端账户

Low Supply Chain

依赖版本未锁定

requests>=2.28.0无上限版本锁定，存在依赖漏洞利用风险

skills/smyx_analysis/requirements.txt:1

锁定具体版本如requests==2.31.0

Low Sensitive Access

配置文件暴露App-ID

config.yaml中包含App-ID(x1a3s4nwy1s2r4se)和多个平台配置

skills/smyx_common/scripts/config.yaml:3

将敏感配置移至环境变量或密钥管理服务

Declared capability vs actual capability

Filesystem Block

Declared NONE

→

Inferred WRITE

skills/smyx_common/scripts/dao.py:86 创建SQLite数据库文件

Network Block

Declared READ

→

Inferred WRITE

skills/smyx_common/scripts/util.py:195 POST凭证到/sys/phoneLogin云端注册

Environment Block

Declared NONE

→

Inferred READ

skills/smyx_common/scripts/config.py:158-163 读取OPENCLAW_SENDER_OPEN_ID等环境变量

Database Block

Declared NONE

→

Inferred WRITE

skills/smyx_common/scripts/dao.py:60 UserDao.save()写入用户凭证

Shell Pass

Declared NONE

→

Inferred NONE

skills/smyx_common/scripts/skill.py:36 subprocess.run被注释，未执行

Suspicious artifacts and egress

Medium External URL

https://lifeemergence.com/sample.html

SKILL.md:34

Medium External URL

https://clawhub.ai/user/18072937735

skill-card.md:9

Medium External URL

https://clawhub.ai/18072937735/skills/smyx-root-health-transparent-pot-analysis

skill-card.md:43

Medium External URL

http://192.168.1.234:9601/smyx-open-api

skills/smyx_common/scripts/config-dev.yaml:2

Medium External URL

http://192.168.1.234:4100

skills/smyx_common/scripts/config-dev.yaml:3

Medium External URL

http://192.168.1.234:7070/jeecg-boot-xzgz

skills/smyx_common/scripts/config-dev.yaml:4

Medium External URL

https://livemonitortest.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config-test.yaml:2

Medium External URL

http://livemonitortest.lifeemergence.com

skills/smyx_common/scripts/config-test.yaml:3

Medium External URL

https://healthtest.lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config-test.yaml:4

Medium External URL

https://lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config.yaml:4

Medium External URL

https://open.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config.yaml:5

Medium External URL

http://livemonitor.lifeemergence.com

skills/smyx_common/scripts/config.yaml:6

Dependencies and supply chain

Package	Version	Source	Known vuln	Notes
requests	`>=2.28.0`	pip	No	无版本上限锁定
pydash	`8.0.6`	pip	No	版本已锁定
SQLAlchemy	`2.0.46`	pip	No	版本已锁定

File composition

30 files · 2675 lines

Python 18 files · 2363 linesMarkdown 4 files · 277 linesYAML 6 files · 29 linesText 2 files · 6 lines

Files of concern · 4

skills/smyx_common/scripts/util.py Python · 718 lines

云端静默注册机制未声明

skills/smyx_common/scripts/dao.py Python · 499 lines

未声明的本地数据库写入

SKILL.md Markdown · 175 lines

https://lifeemergence.com/sample.html

skill-card.md Markdown · 63 lines

https://clawhub.ai/user/18072937735 · https://clawhub.ai/18072937735/skills/smyx-root-health-transparent-pot-analysis

Other files · config.py · skill.py · smyx_analysis.py · smyx_root_health_transparent_pot_analysis.py · api_service.py · skill.py +2

30 files · 109.5 KB · 2675 lines

Python 18f · 2363LMarkdown 4f · 277LYAML 6f · 29LText 2f · 6L

├─ ▾ 📁 references

│ └─ 📝 api_doc.md Markdown 20L · 630 B

├─ ▾ 📁 scripts

│ ├─ 🐍 __init__.py Python 1L · 63 B

│ ├─ 🐍 config.py Python 24L · 695 B

│ ├─ 📋 config.yaml YAML 1L · 3 B

│ ├─ 🐍 skill.py Python 23L · 582 B

│ └─ 🐍 smyx_root_health_transparent_pot_analysis.py Python 102L · 3.4 KB

├─ ▾ 📁 skills

│ ├─ ▾ 📁 smyx_analysis

│ │ ├─ ▾ 📁 references

│ │ │ └─ 📝 api_doc.md Markdown 19L · 427 B

│ │ ├─ ▾ 📁 scripts

│ │ │ ├─ 🐍 __init__.py Python 0 B

│ │ │ ├─ 🐍 api_service.py Python 40L · 1.5 KB

│ │ │ ├─ 🐍 config.py Python 39L · 1003 B

│ │ │ ├─ 📋 config.yaml YAML 1L · 3 B

│ │ │ ├─ 🐍 skill.py Python 175L · 6.4 KB

│ │ │ └─ 🐍 smyx_analysis.py Python 115L · 3.7 KB

│ │ ├─ 🐍 __init__.py Python 0 B

│ │ └─ 📄 requirements.txt Text 3L · 45 B

│ └─ ▾ 📁 smyx_common

│ ├─ ▾ 📁 scripts

│ │ ├─ 🐍 __init__.py Python 9L · 177 B

│ │ ├─ 🐍 api_service.py Python 101L · 2.6 KB

│ │ ├─ 🐍 base.py Python 33L · 469 B

│ │ ├─ 📋 config-dev.yaml YAML 6L · 214 B

│ │ ├─ 📋 config-prod.yaml YAML 0 B

│ │ ├─ 📋 config-test.yaml YAML 6L · 256 B

│ │ ├─ 🐍 config.py Python 399L · 23.8 KB

│ │ ├─ 📋 config.yaml YAML 15L · 472 B

│ │ ├─ 🐍 dao.py Python 499L · 17.8 KB

│ │ ├─ 🐍 skill.py Python 85L · 2.4 KB

│ │ └─ 🐍 util.py Python 718L · 28.1 KB

│ ├─ 🐍 __init__.py Python 0 B

│ └─ 📄 requirements.txt Text 3L · 47 B

├─ 📝 SKILL.md Markdown 175L · 12.1 KB

└─ 📝 skill-card.md Markdown 63L · 2.7 KB

Security positives

技能功能明确，为植物根系健康分析工具，无伪装成系统工具

subprocess调用代码被注释，实际未执行任何shell命令

无base64编码、eval执行等混淆技术

无访问~/.ssh、~/.aws等高危敏感路径

无数据外泄到未知第三方IP，所有API请求均指向lifeemergence.com域名