安全决策报告
vibo-memory
This is a documentation-only skill package with no executable code present; the hardcoded IP is a documented DNS workaround, external URLs are clearly declared, and local data storage is well-documented, but the actual Python scripts and protected components referenced in the docs are absent from this package.
为什么得出这个结论
1/4 个维度触发 通过
声明与实际能力
声明资源与推断能力基本一致。
阻止
隐藏执行与外联
提取到 1 个高危 IOC 或外联信号。
通过
攻击链与高危发现
没有形成明确的恶意路径。
复核
依赖与供应链卫生
没有完整依赖信息，供应链判断需要保留弹性。
风险分是怎么被拉高的
No executable code present +5
Package contains only markdown docs; referenced Python scripts (activate.py, vibo_use.py, etc.) and vibo/ protected components are absent — cannot verify actual behavior
Hardcoded IP address +8
IP 3.173.21.63 at SKILL.md:272 is documented as a DNS workaround for VPS resolvers blocking api.deepseek.com — plausible legitimate explanation
Hosted proxy external routing +5
wwwvibo.com/v1 hosted proxy mode is clearly documented as opt-in; self-hosted is the default — acceptable
License activation with device ID +2
Activation server contact (hashed device ID + license key) is declared in EULA.md §8.2 — standard DRM practice
Good documentation transparency +-5
SKILL.md documents data flows, storage paths, consent requirements, and deletion methods comprehensively — no hidden behavior in docs
SKILL.md/INSTALL.md mismatch +3
SKILL.md claims vibo_skill.zip structure with scripts/proxy dir, but only docs are present in this package — minor packaging concern
最关键的证据
中危 文档欺骗
Package contains only documentation — no executable code
SKILL.md declares scripts (activate.py, check_license.py, vibo_use.py, vibo_web.py, guardian_check.py) and a vibo-proxy/ directory, but NONE of these files are present in the package. The actual code that will execute on the agent's machine is missing from this review. The skill cannot function without the separately distributed vibo_skill.zip contents.
SKILL.md:1 Review the actual Python scripts before deployment. Request the full vibo_skill.zip package including all .py files and protected components for a complete security assessment.
低危 敏感访问
Hardcoded IP address for DNS workaround
SKILL.md:272 hardcodes IP 3.173.21.63 with a comment explaining it as a DNS workaround for VPS resolvers that return SERVFAIL for api.deepseek.com. This is a plausible legitimate explanation but hardcoding IPs is generally undesirable.
SKILL.md:272 Verify this IP is a legitimate DeepSeek API endpoint. Consider documenting the IP source and whether it could change.
低危 权限提升
License activation requires outbound contact to activation server
The skill transmits a hashed device identifier and license key to https://wwwvibo.com upon activation and performs license checks on every run. While declared in EULA.md §8.2, this creates an external network dependency and periodic outbound contact.
EULA.md:91 Understand that license checks require internet connectivity. If the activation server is unavailable, the skill will not function.
提示 敏感访问
Hosted proxy mode sends prompts to external service
The optional hosted proxy mode (https://wwwvibo.com/v1) forwards prompts through the licensor's server. This is clearly documented and explicitly opt-in, but users handling sensitive data should only use self-hosted proxy.
SKILL.md:71 For confidential work, always use self-hosted proxy (localhost:8017). The skill warns against configuring the proxy as the ONLY model route.
声明能力 vs 实际能力
文件系统 通过
声明 NONE
→ 推断 NONE
No Python scripts present — filesystem access cannot be confirmed or denied. SKILL.md documents local file storage (memory.web, thread.web, /tmp/vibo_web_cache.json) but scripts are absent. 网络访问 通过
声明 READ (web fetching for compression)
→ 推断 READ
SKILL.md:206 — web compression fetches URLs for article content. Declared as feature. 命令执行 通过
声明 WRITE
→ 推断 NONE
SKILL.md lists Python CLI tools but no .py scripts are in the package. Shell execution capability cannot be verified. 环境变量 通过
声明 NONE
→ 推断 NONE
L3 secrets use AES-256-GCM encryption; password never stored in plaintext. No evidence of environment variable iteration. 浏览器 通过
声明 NONE
→ 推断 NONE
No browser access declared or found. 数据库 通过
声明 NONE
→ 推断 NONE
No database access. 技能调用 通过
声明 NONE
→ 推断 NONE
No skill invocation. 剪贴板 通过
声明 NONE
→ 推断 NONE
No clipboard access. 可疑产物与外联
高危 IP 地址
3.173.21.63 SKILL.md:272
中危 外部 URL
https://wwwvibo.com. EULA.md:21
中危 外部 URL
https://wwwvibo.com EULA.md:91
中危 外部 URL
https://my-site.com INSTALL.md:51
中危 外部 URL
https://wwwvibo.com/v1 SKILL.md:71
中危 外部 URL
https://wwwvibo.com** SKILL.md:323
中危 外部 URL
https://clawhub.ai/user/vnbochkarev-netizen skill-card.md:9
中危 外部 URL
https://clawhub.ai/vnbochkarev-netizen/skills/vibo-memory skill-card.md:39
中危 外部 URL
https://api.deepseek.com/v1 vibo-proxy-install.md:56
依赖与供应链
没有结构化依赖告警。
文件构成
8 个文件 · 1054 行
Markdown 6 个文件 · 1048 行JSON 1 个文件 · 5 行Other 1 个文件 · 1 行
需关注文件 · 5
SKILL.md Package contains only documentation — no executable code · Hardcoded IP address for DNS workaround · Hosted proxy mode sends prompts to external service · 3.173.21.63 · https://wwwvibo.com/v1 · https://wwwvibo.com**
INSTALL.md https://my-site.com
EULA.md License activation requires outbound contact to activation server · https://wwwvibo.com. · https://wwwvibo.com · [email protected]
skill-card.md https://clawhub.ai/user/vnbochkarev-netizen · https://clawhub.ai/vnbochkarev-netizen/skills/vibo-memory
vibo-proxy-install.md https://api.deepseek.com/v1
其他文件 · THREAD_MEMORY_GUIDE.md · _meta.json · VERSION
安全亮点
Comprehensive documentation — data flows, storage paths, and deletion methods are clearly described
Granular consent-first design — each module defaults OFF and requires explicit user approval
L3 secrets use AES-256-G256-GCM encryption with user password — secrets never reach the LLM
External URLs are clearly documented with privacy implications spelled out (hosted proxy is opt-in)
EULA.md §8 explicitly declares what is and is not transmitted to external servers
Guardian and proxy management features are optional and clearly marked as separate paid add-ons
No base64-encoded execution, no curl|bash patterns, no obfuscation observed in documentation
Memory/web data is declared to stay local — no telemetry or cloud sync in default mode
skill-card.md self-identifies known risks and provides mitigations transparently