Skill Trust Decision

smyx-workplace-stress-heatmap-analysis

Name: smyx-workplace-stress-heatmap-analysis Trust Review Report
Item: smyx-workplace-stress-heatmap-analysis
Rating: 55
Author: ClawSafe

Skill contains significant undocumented behavior including silent user registration, persistent local identity tracking via SQLite database, and automatic cloud API authentication without user disclosure or consent.

Install decision first Source: ClawHub Scanned: Sep 13, 2026

Files 31

Artifacts 12

Violations 4

Findings 6

Most direct threat evidence

High Doc Mismatch

Undeclared local SQLite database with user identity

The skill creates a persistent SQLite database (smyx-common-claw.db) in the workspace data/ directory that stores usernames, tokens, and open_tokens. This is not mentioned anywhere in SKILL.md.

skills/smyx_common/scripts/dao.py:102

Why this conclusion was reached

2/4 dimensions flagged

Block

Declared vs actual capability

4 undeclared or violating capabilities were inferred.

Review

Hidden execution and egress

12 lower-risk artifacts were extracted and still need context.

Block

Attack chain and severe findings

The report includes 0 attack-chain steps and 3 severe findings.

Review

Dependencies and supply chain hygiene

3 dependency or supply-chain issues need attention.

What drove the risk score up

Hidden user identity management +15

OpenIdUtil creates/reads local SQLite database and auto-generates User_ identities not disclosed in SKILL.md

Silent user registration +10

RequestUtil._get_or_create_user() silently registers users at /sys/phoneLogin without disclosure

Undeclared credential persistence +10

Tokens and API keys stored in local smyx-common-claw.db database

Cloud API data exfiltration +10

Workplace video and user identity sent to external APIs (lifeemergence.com) without clear endpoint documentation

Most important evidence

High Doc Mismatch

Undeclared local SQLite database with user identity

The skill creates a persistent SQLite database (smyx-common-claw.db) in the workspace data/ directory that stores usernames, tokens, and open_tokens. This is not mentioned anywhere in SKILL.md.

skills/smyx_common/scripts/dao.py:102

Disclose local database creation and what data is stored in SKILL.md

High Credential Theft

Silent user registration without consent

RequestUtil._get_or_create_user() automatically registers users at the cloud API (/sys/phoneLogin) with 'silent: 1, register: 1' parameters. This happens without explicit user disclosure or consent.

skills/smyx_common/scripts/util.py:315

Disclose automatic user registration behavior or require explicit opt-in

High Doc Mismatch

Hidden identity auto-generation

OpenIdUtil auto-generates User_{6-char-hex} identities when no open-id is provided. This internal identity management is completely hidden from users.

skills/smyx_common/scripts/util.py:250

Document the identity management mechanism and allow users to control it

Medium Data Exfil

Undocumented cloud API communication

The skill sends workplace video files, facial analysis data, and user identity information to external APIs at lifeemergence.com. The exact data handling policies of this third-party service are not documented.

skills/smyx_common/scripts/config.yaml:4

Document all external API endpoints and their data handling policies

Medium Doc Mismatch

Version mismatch between files

SKILL.md claims version 1.0.14, while _meta.json and skill-card.md both say 1.0.8. This inconsistency raises questions about documentation integrity.

SKILL.md:3

Ensure consistent version numbers across all documentation files

Low Sensitive Access

Internal IP addresses in dev config

config-dev.yaml contains internal network IP addresses (192.168.1.234) which could leak network topology information if exposed.

skills/smyx_common/scripts/config-dev.yaml:2

Remove internal IP references from distributed configs

Declared capability vs actual capability

Filesystem Block

Declared NONE

→

Inferred WRITE

dao.py:102 creates SQLite DB in workspace data/ directory

Network Block

Declared NONE

→

Inferred WRITE

util.py:340 sends requests to https://lifeemergence.com with user identity data

Database Block

Declared NONE

→

Inferred WRITE

dao.py:47 creates sqlalchemy SQLite engine with local persistence

Environment Block

Declared NONE

→

Inferred READ

config.py:385 reads OPENCLAW_SENDER_OPEN_ID, OPENCLAW_SENDER_USERNAME, FEISHU_OPEN_ID

Suspicious artifacts and egress

Medium External URL

https://lifeemergence.com/sample.html

SKILL.md:34

Medium External URL

https://clawhub.ai/user/smyx-sunjinhui

skill-card.md:9

Medium External URL

https://clawhub.ai/smyx-sunjinhui/skills/smyx-workplace-stress-heatmap-analysis

skill-card.md:43

Medium External URL

http://192.168.1.234:9601/smyx-open-api

skills/smyx_common/scripts/config-dev.yaml:2

Medium External URL

http://192.168.1.234:4100

skills/smyx_common/scripts/config-dev.yaml:3

Medium External URL

http://192.168.1.234:7070/jeecg-boot-xzgz

skills/smyx_common/scripts/config-dev.yaml:4

Medium External URL

https://livemonitortest.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config-test.yaml:2

Medium External URL

http://livemonitortest.lifeemergence.com

skills/smyx_common/scripts/config-test.yaml:3

Medium External URL

https://healthtest.lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config-test.yaml:4

Medium External URL

https://lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config.yaml:4

Medium External URL

https://open.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config.yaml:5

Medium External URL

http://livemonitor.lifeemergence.com

skills/smyx_common/scripts/config.yaml:6

Dependencies and supply chain

Package	Version	Source	Known vuln	Notes
pydash	`8.0.6`	pip	No	Version pinned
SQLAlchemy	`2.0.46`	pip	No	Version pinned
PyYAML	`6.0.3`	pip	No	Version pinned
requests	`>=2.28.0`	pip	No	Lower bound only, no upper bound

File composition

31 files · 2737 lines

Python 18 files · 2363 linesMarkdown 4 files · 334 linesYAML 6 files · 29 linesText 2 files · 6 linesJSON 1 files · 5 lines

Files of concern · 4

skills/smyx_common/scripts/util.py Python · 718 lines

Silent user registration without consent · Hidden identity auto-generation

skills/smyx_common/scripts/dao.py Python · 499 lines

Undeclared local SQLite database with user identity

SKILL.md Markdown · 182 lines

Version mismatch between files · https://lifeemergence.com/sample.html

skill-card.md Markdown · 64 lines

https://clawhub.ai/user/smyx-sunjinhui · https://clawhub.ai/smyx-sunjinhui/skills/smyx-workplace-stress-heatmap-analysis

Other files · config.py · skill.py · api_doc.md · smyx_analysis.py · smyx_workplace_stress_heatmap_analysis.py · api_service.py +2

31 files · 114.6 KB · 2737 lines

Python 18f · 2363LMarkdown 4f · 334LYAML 6f · 29LText 2f · 6LJSON 1f · 5L

├─ ▾ 📁 references

│ └─ 📝 api_doc.md Markdown 69L · 3.8 KB

├─ ▾ 📁 scripts

│ ├─ 🐍 __init__.py Python 1L · 58 B

│ ├─ 🐍 config.py Python 24L · 686 B

│ ├─ 📋 config.yaml YAML 1L · 3 B

│ ├─ 🐍 skill.py Python 23L · 582 B

│ └─ 🐍 smyx_workplace_stress_heatmap_analysis.py Python 102L · 3.6 KB

├─ ▾ 📁 skills

│ ├─ ▾ 📁 smyx_analysis

│ │ ├─ ▾ 📁 references

│ │ │ └─ 📝 api_doc.md Markdown 19L · 427 B

│ │ ├─ ▾ 📁 scripts

│ │ │ ├─ 🐍 __init__.py Python 0 B

│ │ │ ├─ 🐍 api_service.py Python 40L · 1.5 KB

│ │ │ ├─ 🐍 config.py Python 39L · 1003 B

│ │ │ ├─ 📋 config.yaml YAML 1L · 3 B

│ │ │ ├─ 🐍 skill.py Python 175L · 6.4 KB

│ │ │ └─ 🐍 smyx_analysis.py Python 115L · 3.7 KB

│ │ ├─ 🐍 __init__.py Python 0 B

│ │ └─ 📄 requirements.txt Text 3L · 45 B

│ └─ ▾ 📁 smyx_common

│ ├─ ▾ 📁 scripts

│ │ ├─ 🐍 __init__.py Python 9L · 177 B

│ │ ├─ 🐍 api_service.py Python 101L · 2.6 KB

│ │ ├─ 🐍 base.py Python 33L · 469 B

│ │ ├─ 📋 config-dev.yaml YAML 6L · 214 B

│ │ ├─ 📋 config-prod.yaml YAML 0 B

│ │ ├─ 📋 config-test.yaml YAML 6L · 256 B

│ │ ├─ 🐍 config.py Python 399L · 23.8 KB

│ │ ├─ 📋 config.yaml YAML 15L · 472 B

│ │ ├─ 🐍 dao.py Python 499L · 17.8 KB

│ │ ├─ 🐍 skill.py Python 85L · 2.4 KB

│ │ └─ 🐍 util.py Python 718L · 28.1 KB

│ ├─ 🐍 __init__.py Python 0 B

│ └─ 📄 requirements.txt Text 3L · 47 B

├─ 📝 SKILL.md Markdown 182L · 13.3 KB

├─ 📋 _meta.json JSON 5L · 157 B

└─ 📝 skill-card.md Markdown 64L · 3.1 KB

Security positives

No shell command execution or subprocess usage

No credential harvesting from environment (reads only specific env vars related to agent context)

No obfuscated code or base64 payloads

No access to ~/.ssh, ~/.aws, or other sensitive directories

Dependencies have pinned versions in requirements.txt

Video input is validated for file type and size before processing