Skill Trust Decision

plant-wilting-monitoring-analysis

Name: plant-wilting-monitoring-analysis Trust Review Report
Item: plant-wilting-monitoring-analysis
Rating: 80
Author: ClawSafe

这是一个合法的植物枯萎监测分析技能，功能正常但存在配置文件暴露API凭证和环境变量读取行为的安全瑕疵。

Install decision first Source: ClawHub Scanned: 9 days ago

Files 29

Artifacts 12

Violations 0

Findings 4

Why this conclusion was reached

0/4 dimensions flagged

Pass

Declared vs actual capability

Declared resources and inferred behavior are broadly aligned.

Review

Hidden execution and egress

12 lower-risk artifacts were extracted and still need context.

Pass

Attack chain and severe findings

There is no explicit malicious chain in the report.

Pass

Dependencies and supply chain hygiene

Dependencies are present but no obvious high-risk issue stands out.

What drove the risk score up

配置文件暴露凭证 +10

config.yaml包含App-ID、飞书App-ID等配置

环境变量读取用户标识 +5

ConstantEnum.init()读取OPENCLAW_SENDER_OPEN_ID等环境变量

依赖版本未锁定 +5

requirements.txt中pydash、SQLAlchemy、PyYAML均无版本锁定

Most important evidence

Low Sensitive Access

配置文件包含API凭证

skills/smyx_common/scripts/config.yaml 包含 App-ID (x1a3s4nwy1s2r4se)、飞书App-ID (cli_a93d769369badcb1) 等配置信息

skills/smyx_common/scripts/config.yaml:1

使用环境变量或密钥管理服务替代配置文件中的明文凭证

Low Sensitive Access

读取环境变量获取用户标识

ConstantEnum.init() 从环境变量读取 OPENCLAW_SENDER_OPEN_ID、OPENCLAW_SENDER_USERNAME、FEISHU_OPEN_ID 用于身份关联

skills/smyx_common/scripts/config.py:96

确认这些环境变量来源可信，仅用于内部身份关联不外传

Low Supply Chain

依赖包版本未锁定

requirements.txt 中 pydash==8.0.6、SQLAlchemy==2.0.46、PyYAML==6.0.3 使用精确版本，但 skills/smyx_analysis/requirements.txt 中使用了 == 锁定版本

skills/smyx_analysis/requirements.txt:1

确认 yaml==6.0.3 是否为 PyYAML 的正确包名，建议统一使用 PyYAML>=6.0.1

Info Sensitive Access

本地数据库存储用户信息

使用SQLite本地数据库 (smyx-common-claw.db) 存储用户token、open_token等敏感信息

skills/smyx_common/scripts/dao.py:85

确认数据库文件权限设置正确，防止未授权访问

Declared capability vs actual capability

Filesystem Pass

Declared READ

→

Inferred WRITE

scripts/plant_wilting_monitoring_analysis.py:61 写入输出文件

Network Pass

Declared READ

→

Inferred READ

RequestUtil.http_request() 仅调用外部API

Shell Pass

Declared NONE

→

Inferred NONE

未发现subprocess/popen调用

Environment Pass

Declared NONE

→

Inferred READ

skills/smyx_common/scripts/config.py:96-103 读取OPENCLAW_SENDER_OPEN_ID等

Suspicious artifacts and egress

Medium External URL

https://lifeemergence.com/sample.html

SKILL.md:35

Medium External URL

https://clawhub.ai/user/smyx-sunjinhui

skill-card.md:9

Medium External URL

https://clawhub.ai/smyx-sunjinhui/skills/smyx-plant-wilting-monitoring-analysis

skill-card.md:39

Medium External URL

http://192.168.1.234:9601/smyx-open-api

skills/smyx_common/scripts/config-dev.yaml:2

Medium External URL

http://192.168.1.234:4100

skills/smyx_common/scripts/config-dev.yaml:3

Medium External URL

http://192.168.1.234:7070/jeecg-boot-xzgz

skills/smyx_common/scripts/config-dev.yaml:4

Medium External URL

https://livemonitortest.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config-test.yaml:2

Medium External URL

http://livemonitortest.lifeemergence.com

skills/smyx_common/scripts/config-test.yaml:3

Medium External URL

https://healthtest.lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config-test.yaml:4

Medium External URL

https://lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config.yaml:4

Medium External URL

https://open.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config.yaml:5

Medium External URL

http://livemonitor.lifeemergence.com

skills/smyx_common/scripts/config.yaml:6

Dependencies and supply chain

Package	Version	Source	Known vuln	Notes
pydash	`8.0.6`	pip	No	精确版本锁定
SQLAlchemy	`2.0.46`	pip	No	精确版本锁定
yaml (PyYAML)	`6.0.3`	pip	No	包名不标准（应为PyYAML），但版本已锁定

File composition

29 files · 2656 lines

Python 18 files · 2357 linesMarkdown 3 files · 264 linesYAML 6 files · 29 linesText 2 files · 6 lines

Files of concern · 4

skills/smyx_common/scripts/config.py Python · 399 lines

读取环境变量获取用户标识

skills/smyx_common/scripts/dao.py Python · 499 lines

本地数据库存储用户信息

SKILL.md Markdown · 186 lines

https://lifeemergence.com/sample.html

skill-card.md Markdown · 59 lines

https://clawhub.ai/user/smyx-sunjinhui · https://clawhub.ai/smyx-sunjinhui/skills/smyx-plant-wilting-monitoring-analysis

Other files · util.py · skill.py · smyx_analysis.py · plant_wilting_monitoring_analysis.py · api_service.py · skill.py +2

29 files · 106.3 KB · 2656 lines

Python 18f · 2357LMarkdown 3f · 264LYAML 6f · 29LText 2f · 6L

├─ ▾ 📁 scripts

│ ├─ 🐍 __init__.py Python 1L · 31 B

│ ├─ 🐍 config.py Python 24L · 649 B

│ ├─ 📋 config.yaml YAML 1L · 3 B

│ ├─ 🐍 plant_wilting_monitoring_analysis.py Python 96L · 3.1 KB

│ └─ 🐍 skill.py Python 23L · 573 B

├─ ▾ 📁 skills

│ ├─ ▾ 📁 smyx_analysis

│ │ ├─ ▾ 📁 references

│ │ │ └─ 📝 api_doc.md Markdown 19L · 427 B

│ │ ├─ ▾ 📁 scripts

│ │ │ ├─ 🐍 __init__.py Python 0 B

│ │ │ ├─ 🐍 api_service.py Python 40L · 1.5 KB

│ │ │ ├─ 🐍 config.py Python 39L · 1003 B

│ │ │ ├─ 📋 config.yaml YAML 1L · 3 B

│ │ │ ├─ 🐍 skill.py Python 175L · 6.4 KB

│ │ │ └─ 🐍 smyx_analysis.py Python 115L · 3.7 KB

│ │ ├─ 🐍 __init__.py Python 0 B

│ │ └─ 📄 requirements.txt Text 3L · 45 B

│ └─ ▾ 📁 smyx_common

│ ├─ ▾ 📁 scripts

│ │ ├─ 🐍 __init__.py Python 9L · 177 B

│ │ ├─ 🐍 api_service.py Python 101L · 2.6 KB

│ │ ├─ 🐍 base.py Python 33L · 469 B

│ │ ├─ 📋 config-dev.yaml YAML 6L · 214 B

│ │ ├─ 📋 config-prod.yaml YAML 0 B

│ │ ├─ 📋 config-test.yaml YAML 6L · 256 B

│ │ ├─ 🐍 config.py Python 399L · 23.8 KB

│ │ ├─ 📋 config.yaml YAML 15L · 473 B

│ │ ├─ 🐍 dao.py Python 499L · 17.8 KB

│ │ ├─ 🐍 skill.py Python 85L · 2.4 KB

│ │ └─ 🐍 util.py Python 718L · 28.1 KB

│ ├─ 🐍 __init__.py Python 0 B

│ └─ 📄 requirements.txt Text 3L · 47 B

├─ 📝 SKILL.md Markdown 186L · 10.6 KB

└─ 📝 skill-card.md Markdown 59L · 2.0 KB

Security positives

代码结构清晰，无混淆或隐藏恶意逻辑

无远程脚本下载或执行行为

无反向shell或RCE漏洞

无凭证外传或数据泄露行为

使用yaml.safe_load()防止YAML注入

API请求使用HTTPS加密传输

skill-card.md 披露了潜在风险（身份创建、媒体上传）