Skill Trust Decision
vibo-memory
This is a documentation-only skill package with no executable code present; the hardcoded IP is a documented DNS workaround, external URLs are clearly declared, and local data storage is well-documented, but the actual Python scripts and protected components referenced in the docs are absent from this package.
Why this conclusion was reached
1/4 dimensions flagged Pass
Declared vs actual capability
Declared resources and inferred behavior are broadly aligned.
Block
Hidden execution and egress
1 high-risk artifacts or egress signals were extracted.
Pass
Attack chain and severe findings
There is no explicit malicious chain in the report.
Review
Dependencies and supply chain hygiene
Dependency information is incomplete, so supply-chain confidence stays limited.
What drove the risk score up
No executable code present +5
Package contains only markdown docs; referenced Python scripts (activate.py, vibo_use.py, etc.) and vibo/ protected components are absent — cannot verify actual behavior
Hardcoded IP address +8
IP 3.173.21.63 at SKILL.md:272 is documented as a DNS workaround for VPS resolvers blocking api.deepseek.com — plausible legitimate explanation
Hosted proxy external routing +5
wwwvibo.com/v1 hosted proxy mode is clearly documented as opt-in; self-hosted is the default — acceptable
License activation with device ID +2
Activation server contact (hashed device ID + license key) is declared in EULA.md §8.2 — standard DRM practice
Good documentation transparency +-5
SKILL.md documents data flows, storage paths, consent requirements, and deletion methods comprehensively — no hidden behavior in docs
SKILL.md/INSTALL.md mismatch +3
SKILL.md claims vibo_skill.zip structure with scripts/proxy dir, but only docs are present in this package — minor packaging concern
Most important evidence
Medium Doc Mismatch
Package contains only documentation — no executable code
SKILL.md declares scripts (activate.py, check_license.py, vibo_use.py, vibo_web.py, guardian_check.py) and a vibo-proxy/ directory, but NONE of these files are present in the package. The actual code that will execute on the agent's machine is missing from this review. The skill cannot function without the separately distributed vibo_skill.zip contents.
SKILL.md:1 Review the actual Python scripts before deployment. Request the full vibo_skill.zip package including all .py files and protected components for a complete security assessment.
Low Sensitive Access
Hardcoded IP address for DNS workaround
SKILL.md:272 hardcodes IP 3.173.21.63 with a comment explaining it as a DNS workaround for VPS resolvers that return SERVFAIL for api.deepseek.com. This is a plausible legitimate explanation but hardcoding IPs is generally undesirable.
SKILL.md:272 Verify this IP is a legitimate DeepSeek API endpoint. Consider documenting the IP source and whether it could change.
Low Priv Escalation
License activation requires outbound contact to activation server
The skill transmits a hashed device identifier and license key to https://wwwvibo.com upon activation and performs license checks on every run. While declared in EULA.md §8.2, this creates an external network dependency and periodic outbound contact.
EULA.md:91 Understand that license checks require internet connectivity. If the activation server is unavailable, the skill will not function.
Info Sensitive Access
Hosted proxy mode sends prompts to external service
The optional hosted proxy mode (https://wwwvibo.com/v1) forwards prompts through the licensor's server. This is clearly documented and explicitly opt-in, but users handling sensitive data should only use self-hosted proxy.
SKILL.md:71 For confidential work, always use self-hosted proxy (localhost:8017). The skill warns against configuring the proxy as the ONLY model route.
Declared capability vs actual capability
Filesystem Pass
Declared NONE
→ Inferred NONE
No Python scripts present — filesystem access cannot be confirmed or denied. SKILL.md documents local file storage (memory.web, thread.web, /tmp/vibo_web_cache.json) but scripts are absent. Network Pass
Declared READ (web fetching for compression)
→ Inferred READ
SKILL.md:206 — web compression fetches URLs for article content. Declared as feature. Shell Pass
Declared WRITE
→ Inferred NONE
SKILL.md lists Python CLI tools but no .py scripts are in the package. Shell execution capability cannot be verified. Environment Pass
Declared NONE
→ Inferred NONE
L3 secrets use AES-256-GCM encryption; password never stored in plaintext. No evidence of environment variable iteration. Browser Pass
Declared NONE
→ Inferred NONE
No browser access declared or found. Database Pass
Declared NONE
→ Inferred NONE
No database access. Skill Invoke Pass
Declared NONE
→ Inferred NONE
No skill invocation. Clipboard Pass
Declared NONE
→ Inferred NONE
No clipboard access. Suspicious artifacts and egress
High IP Address
3.173.21.63 SKILL.md:272
Medium External URL
https://wwwvibo.com. EULA.md:21
Medium External URL
https://wwwvibo.com EULA.md:91
Medium External URL
https://my-site.com INSTALL.md:51
Medium External URL
https://wwwvibo.com/v1 SKILL.md:71
Medium External URL
https://wwwvibo.com** SKILL.md:323
Medium External URL
https://clawhub.ai/user/vnbochkarev-netizen skill-card.md:9
Medium External URL
https://clawhub.ai/vnbochkarev-netizen/skills/vibo-memory skill-card.md:39
Medium External URL
https://api.deepseek.com/v1 vibo-proxy-install.md:56
Dependencies and supply chain
There are no structured dependency warnings.
File composition
8 files · 1054 lines
Markdown 6 files · 1048 linesJSON 1 files · 5 linesOther 1 files · 1 lines
Files of concern · 5
SKILL.md Package contains only documentation — no executable code · Hardcoded IP address for DNS workaround · Hosted proxy mode sends prompts to external service · 3.173.21.63 · https://wwwvibo.com/v1 · https://wwwvibo.com**
INSTALL.md https://my-site.com
EULA.md License activation requires outbound contact to activation server · https://wwwvibo.com. · https://wwwvibo.com · [email protected]
skill-card.md https://clawhub.ai/user/vnbochkarev-netizen · https://clawhub.ai/vnbochkarev-netizen/skills/vibo-memory
vibo-proxy-install.md https://api.deepseek.com/v1
Other files · THREAD_MEMORY_GUIDE.md · _meta.json · VERSION
Security positives
Comprehensive documentation — data flows, storage paths, and deletion methods are clearly described
Granular consent-first design — each module defaults OFF and requires explicit user approval
L3 secrets use AES-256-G256-GCM encryption with user password — secrets never reach the LLM
External URLs are clearly documented with privacy implications spelled out (hosted proxy is opt-in)
EULA.md §8 explicitly declares what is and is not transmitted to external servers
Guardian and proxy management features are optional and clearly marked as separate paid add-ons
No base64-encoded execution, no curl|bash patterns, no obfuscation observed in documentation
Memory/web data is declared to stay local — no telemetry or cloud sync in default mode
skill-card.md self-identifies known risks and provides mitigations transparently