安全决策报告
watch-cli
This is a documentation-only skill wrapper around the watch-cli CLI tool with well-documented behavior including network access, external API transcription, and optional browser cookie usage - all declared and user-consented.
为什么得出这个结论
0/4 个维度触发 通过
声明与实际能力
声明资源与推断能力基本一致。
复核
隐藏执行与外联
提取到 3 个一般风险产物，需要结合上下文判断。
通过
攻击链与高危发现
没有形成明确的恶意路径。
复核
依赖与供应链卫生
没有完整依赖信息，供应链判断需要保留弹性。
风险分是怎么被拉高的
curl|bash installation pattern +10
Fallback installer uses remote script but includes SHA256 verification and Homebrew is preferred
Network data transfer declared +5
Audio upload to Kyma API is explicitly documented in SKILL.md
Browser cookie access documented +5
Optional feature requires explicit user opt-in per run
最关键的证据
低危 供应链
curl|bash installation fallback
The fallback installer downloads and executes a remote shell script from GitHub. However, it uses a pinned release (v0.3.4) with SHA256 verification of the tarball.
SKILL.md:13 Prefer Homebrew installation path. If using shell install, independently verify the installer script before execution.
低危 数据外泄
Audio transcription to external API
Extracted audio is uploaded to Kyma API for transcription. This is explicitly declared and documented as an opt-in feature with local transcription alternative.
SKILL.md:85 For sensitive content, use --with-local flag to run whisper.cpp offline instead of Kyma API.
低危 敏感访问
Optional browser cookie access
WATCH_BROWSER=auto or --cookies flags enable browser cookie reading for authenticated content. Requires explicit user consent per run and only sends cookies to the relevant platform.
SKILL.md:36 Always obtain explicit user consent before enabling browser cookie access.
声明能力 vs 实际能力
网络访问 通过
声明 READ
→ 推断 READ
SKILL.md line 85: 'video download goes to the platform' and 'audio track is uploaded to Kyma API' 文件系统 通过
声明 READ+WRITE
→ 推断 READ+WRITE
SKILL.md line 87: 'frames and video file stay on disk under ~/.watch-cli/archive' 环境变量 通过
声明 READ
→ 推断 READ
SKILL.md line 103: reads KYMA_API_KEY, WATCH_BROWSER environment variables 命令执行 通过
声明 WRITE
→ 推断 WRITE
SKILL.md line 53: executes 'watch <url>' and 'watch-archive' commands 可疑产物与外联
中危 外部 URL
https://kymaapi.com/?src=skill:watch SKILL.md:105
中危 外部 URL
https://clawhub.ai/user/sonpiaz skill-card.md:9
中危 外部 URL
https://clawhub.ai/sonpiaz/skills/watch-cli skill-card.md:39
依赖与供应链
没有结构化依赖告警。
文件构成
3 个文件 · 174 行
Markdown 2 个文件 · 169 行JSON 1 个文件 · 5 行
需关注文件 · 2
SKILL.md curl|bash installation fallback · Audio transcription to external API · Optional browser cookie access · https://kymaapi.com/?src=skill:watch
skill-card.md https://clawhub.ai/user/sonpiaz · https://clawhub.ai/sonpiaz/skills/watch-cli
其他文件 · _meta.json
安全亮点
No executable code in skill - only documentation wrapper
All capabilities declared in SKILL.md and skill-card.md
SHA256 verification for remote installer tarball
Local transcription alternative (--with-local) available
Browser cookie access requires explicit user opt-in
Known risks explicitly documented in skill-card.md
Open source project with verifiable GitHub repository