Skill Trust Decision
smyx-pet-oral-snapshot-gum-redness-analysis
Pet oral health analysis skill with undocumented network communication to third-party cloud services and obscured user identity management mechanisms.
Most direct threat evidence
Why this conclusion was reached
1/4 dimensions flagged Block
Declared vs actual capability
3 undeclared or violating capabilities were inferred.
Review
Hidden execution and egress
12 lower-risk artifacts were extracted and still need context.
Pass
Attack chain and severe findings
There is no explicit malicious chain in the report.
Review
Dependencies and supply chain hygiene
3 dependency or supply-chain issues need attention.
What drove the risk score up
Undocumented network communication +20
SKILL.md does not explicitly declare that user images/videos are sent to external cloud services at lifeemergence.com
Obscured identity management +15
Skill silently creates user accounts via /sys/phoneLogin API and stores tokens in local SQLite database
Silent data persistence +10
Creates smyx-common-claw.db and smyx-api-key.txt in workspace data directory without explicit user consent
Most important evidence
Medium Doc Mismatch
Network communication not declared in SKILL.md
SKILL.md does not explicitly state that user-uploaded images/videos are sent to external cloud services. The skill-card.md documents this under 'Known Risks', but the main SKILL.md lacks this critical disclosure.
SKILL.md:1 Add explicit declaration in SKILL.md: 'This skill sends pet media to lifeemergence.com cloud services for analysis.'
Medium Priv Escalation
Silent user identity creation
OpenIdUtil.resolve_current_open_id() silently creates user accounts by calling /sys/phoneLogin API and stores credentials in local SQLite database without explicit user consent.
skills/smyx_common/scripts/util.py:252 Provide clear documentation about identity creation or require explicit user opt-in
Medium Sensitive Access
Environment variable reading
Skill reads OPENCLAW_SENDER_OPEN_ID, OPENCLAW_SENDER_USERNAME, and FEISHU_OPEN_ID environment variables to auto-associate user identity. While not exfiltrating, this is undocumented behavior.
skills/smyx_common/scripts/config.py:90 Document all environment variables accessed by the skill
Low Doc Mismatch
Silent file persistence
Skill creates smyx-common-claw.db and smyx-api-key.txt in workspace data directory for credential storage. This persistence mechanism is not declared in documentation.
skills/smyx_common/scripts/dao.py:38 Document local data storage behavior in SKILL.md
Declared capability vs actual capability
Filesystem Pass
Declared READ
→ Inferred READ
SKILL.md references --input parameter for local file analysis Network Block
Declared NONE
→ Inferred WRITE
scripts/smyx_common/scripts/util.py - RequestUtil.http_post sends data to lifeemergence.com Database Block
Declared NONE
→ Inferred WRITE
scripts/smyx_common/scripts/dao.py creates SQLite database in workspace Environment Block
Declared NONE
→ Inferred READ
scripts/smyx_common/scripts/config.py reads OPENCLAW_SENDER_OPEN_ID, FEISHU_OPEN_ID Suspicious artifacts and egress
Medium External URL
https://lifeemergence.com/sample.html SKILL.md:38
Medium External URL
https://clawhub.ai/user/18072937735 skill-card.md:9
Medium External URL
https://clawhub.ai/18072937735/skills/smyx-pet-oral-snapshot-gum-redness-analysis skill-card.md:43
Medium External URL
http://192.168.1.234:9601/smyx-open-api skills/smyx_common/scripts/config-dev.yaml:2
Medium External URL
http://192.168.1.234:4100 skills/smyx_common/scripts/config-dev.yaml:3
Medium External URL
http://192.168.1.234:7070/jeecg-boot-xzgz skills/smyx_common/scripts/config-dev.yaml:4
Medium External URL
https://livemonitortest.lifeemergence.com/smyx-open-api skills/smyx_common/scripts/config-test.yaml:2
Medium External URL
http://livemonitortest.lifeemergence.com skills/smyx_common/scripts/config-test.yaml:3
Medium External URL
https://healthtest.lifeemergence.com/jeecg-boot-xzgz skills/smyx_common/scripts/config-test.yaml:4
Medium External URL
https://lifeemergence.com/jeecg-boot-xzgz skills/smyx_common/scripts/config.yaml:4
Medium External URL
https://open.lifeemergence.com/smyx-open-api skills/smyx_common/scripts/config.yaml:5
Medium External URL
http://livemonitor.lifeemergence.com skills/smyx_common/scripts/config.yaml:6
Dependencies and supply chain
| Package | Version | Source | Known vuln | Notes |
|---|---|---|---|---|
| requests | >=2.28.0 | pip | No | Version requirement allows updates |
| pydash | 8.0.6 | pip | No | Properly pinned |
| SQLAlchemy | 2.0.46 | pip | No | Properly pinned |
| PyYAML | 6.0.3 | pip | No | Properly pinned |
File composition
31 files · 2703 lines
Python 18 files · 2363 linesMarkdown 4 files · 300 linesYAML 6 files · 29 linesText 2 files · 6 linesJSON 1 files · 5 lines
Files of concern · 5
skills/smyx_common/scripts/util.py Silent user identity creation
skills/smyx_common/scripts/config.py Environment variable reading
skills/smyx_common/scripts/dao.py Silent file persistence
SKILL.md Network communication not declared in SKILL.md · https://lifeemergence.com/sample.html
skill-card.md https://clawhub.ai/user/18072937735 · https://clawhub.ai/18072937735/skills/smyx-pet-oral-snapshot-gum-redness-analysis
Other files · skill.py · smyx_analysis.py · smyx_pet_oral_snapshot_gum_redness_analysis.py · api_service.py · skill.py · api_service.py +1
Security positives
No reverse shell or command execution backdoors detected
No credential harvesting or exfiltration to attacker-controlled endpoints
No base64-encoded or obfuscated malicious code
Dependencies are properly version-pinned (pydash==8.0.6, SQLAlchemy==2.0.46, PyYAML==6.0.3)
skill-card.md properly documents the known risks of cloud service communication
No curl|bash or wget|sh remote script execution
No access to sensitive paths like ~/.ssh, ~/.aws, or .env files
SQLite database creation is restricted to workspace data directory (proper isolation)