Skill Trust Decision
gumroad
纯文档技能，无可执行代码，仅为 Gumroad API 集成的 Maton CLI 使用手册，IP 硬编码为文档示例占位数据，无实际攻击价值。
Why this conclusion was reached
1/4 dimensions flagged Pass
Declared vs actual capability
Declared resources and inferred behavior are broadly aligned.
Block
Hidden execution and egress
1 high-risk artifacts or egress signals were extracted.
Pass
Attack chain and severe findings
There is no explicit malicious chain in the report.
Review
Dependencies and supply chain hygiene
Dependency information is incomplete, so supply-chain confidence stays limited.
What drove the risk score up
allowed-tools 声明宽泛 +10
Bash/Read/Grep/Glob 覆盖 filesystem:WRITE/READ，但该技能无任何脚本文件，Bash 权限实际无法被利用
文档含硬编码 IP +10
SKILL.md:441 示例 JSON 中含 TEST-NET-3 IP 203.0.113.7，为占位示例数据而非真实连接目标
Most important evidence
Low Doc Mismatch
allowed-tools 权限声明宽泛但无实际代码
Bash（shell:WRITE）列入 allowed-tools，但该技能无任何 scripts/ 目录或可执行代码，Bash 权限无法被利用。这是文档型 skill 的常见过度声明。
SKILL.md:12 将 allowed-tools 收窄为 Read, Grep, Glob 以精确反映实际能力
Info Doc Mismatch
文档示例含硬编码 IP 地址
SKILL.md:441 的 Get Run 示例响应中 source_ip 字段硬编码为 203.0.113.7（TEST-NET-3 保留地址），用于示例目的，无主动网络连接意图。
SKILL.md:441 使用 RFC 5737 TEST-NET-1 地址 192.0.2.1 替代，消除误判
Info Supply Chain
第三方依赖声明在文档中，无锁定版本
pip install 'maton-ai==0.3.1' 和 npm install @maton/[email protected] 在文档中声明版本，但技能本身不执行安装（由用户手动操作），故实际风险转移至 Maton 平台本身。
SKILL.md:1450 无操作建议；依赖管理责任在 Maton 平台侧
Declared capability vs actual capability
Filesystem Pass
Declared READ
→ Inferred READ
无任何文件写入操作，仅 Read/Grep/Glob 工具声明；SKILL.md 纯文档 Shell Pass
Declared WRITE
→ Inferred NONE
Bash 出现在 allowed-tools 但整个 skill 无任何 .sh/.py 脚本，bash 调用仅用于演示 maton CLI 用法，无实际可执行代码 Network Pass
Declared READ
→ Inferred READ
所有网络操作通过 maton CLI 封装，路由至 api.maton.ai 网关，符合声明 Suspicious artifacts and egress
High IP Address
203.0.113.7 SKILL.md:441
Medium External URL
https://clawhub.ai/byungkyu/api-gateway SKILL.md:6
Medium External URL
https://maton.ai SKILL.md:17
Medium External URL
https://maton.ai/settings SKILL.md:65
Medium External URL
https://connect.maton.ai/?session_token=5e9... SKILL.md:100
Medium External URL
https://my-fn-3k9xq2v.maton.app SKILL.md:233
Medium External URL
https://gumroad-check-3k9xq2v.maton.app SKILL.md:566
Medium External URL
https://api.maton.ai SKILL.md:705
Medium External URL
https://new.dev/hook SKILL.md:756
Medium External URL
https://chriswave1246.gumroad.com SKILL.md:954
Medium External URL
https://public-files.gumroad.com/... SKILL.md:955
Medium External URL
https://gumroad.com/l/abc SKILL.md:980
Dependencies and supply chain
There are no structured dependency warnings.
File composition
10 files · 5011 lines
Markdown 10 files · 5011 lines
Files of concern · 5
references/github/triggers.md https://avatars.githubusercontent.com/u/1?v=4 · https://avatars.githubusercontent.com/u/2?v=4 · https://avatars.githubusercontent.com/u/583231?v=4 · https://octocat.github.io · https://avatars.githubusercontent.com/in/3730348?v=4 · [email protected]
SKILL.md allowed-tools 权限声明宽泛但无实际代码 · 文档示例含硬编码 IP 地址 · 第三方依赖声明在文档中，无锁定版本 · 203.0.113.7 · https://clawhub.ai/byungkyu/api-gateway · https://maton.ai · https://maton.ai/settings · https://connect.maton.ai/?session_token=5e9... · https://my-fn-3k9xq2v.maton.app · https://gumroad-check-3k9xq2v.maton.app · https://api.maton.ai · https://new.dev/hook · https://chriswave1246.gumroad.com · https://public-files.gumroad.com/... · https://gumroad.com/l/abc · https://gumroad.com/api · https://help.gumroad.com/article/280-create-application-api · https://help.gumroad.com/article/76-license-keys · https://docs.maton.ai · https://docs.maton.ai/api-reference/overview · https://cli.maton.ai/manual · https://community.maton.ai/ · [email protected]
references/stripe/triggers.md https://pay.stripe.com/receipts/invoices/CAcaFwoVYWNj... · https://pay.stripe.com/invoice/acct_00000000000000/test_YWNj.../pdf?s=ap · https://invoice.stripe.com/i/acct_00000000000000/test_YWNj...?s=ap
references/calendly/triggers.md https://api.calendly.com · https://calendly.com/cancellations/00000000-0000-0000-0000-000000000001 · https://calendly.com/reschedulings/00000000-0000-0000-0000-000000000001 · https://us05web.zoom.us/j/10000000001?pwd=REDACTED · https://calendly.com/cancellations/00000000-0000-0000-0000-000000000003 · https://calendly.com/reschedulings/00000000-0000-0000-0000-000000000003 · https://us05web.zoom.us/j/10000000002?pwd=REDACTED
references/linear/triggers.md https://linear.app/acme/profiles/jane · https://linear.app/acme/issue/ENG-580/test-issue · https://linear.app/acme/profiles/john.doe · https://linear.app/acme/issue/ENG-564/example-issue · https://linear.app/acme/issue/ENG-564/example-issue#comment-0603e91b · [email protected] · [email protected]
Other files · triggers.md · triggers.md · triggers.md · triggers.md · triggers.md
Security positives
纯文档技能，无任何可执行代码或脚本文件
网络操作全部通过 maton CLI 封装至 api.maton.ai 网关，无裸 IP 直连
凭证通过 OS credential store 管理，文档明确禁止明文处理
安全策略详尽，明确禁止凭证外传、敏感路径访问、eval 注入等高危行为
Destination 持久转发有专项警告，要求用户逐条确认
trigger event watch --exec 含明确 untrusted input 警告，要求用户自备 handler
无 .env 文件、无敏感文件、无二进制文件
references/ 目录为平台标准事件源参考文档，与 Gumroad 功能无关，无越权行为