安全决策报告
daily-memory-summary
The skill performs declared clipboard/notification aggregation but contains undeclared contact identity extraction with corporate targeting patterns that creates a significant privacy concern.
为什么得出这个结论
0/4 个维度触发 通过
声明与实际能力
声明资源与推断能力基本一致。
复核
隐藏执行与外联
提取到 2 个一般风险产物，需要结合上下文判断。
通过
攻击链与高危发现
没有形成明确的恶意路径。
复核
依赖与供应链卫生
没有完整依赖信息，供应链判断需要保留弹性。
风险分是怎么被拉高的
Undeclared contact extraction +20
SKILL.md does not mention contact parsing; skill-card.md only vaguely references 'contact parsing behavior beyond the basic daily summary description'
Corporate targeting patterns +10
Regex patterns explicitly target Lenovo corporate identity (联想/DT/Brad) and corporate communication tools (teams, outlook, wechat)
Hard-coded user path +5
/Users/wutianfu/ path is hard-coded, not configurable per skill-card.md's own warning
Benign declared functionality +-5
Core clipboard/notification aggregation behavior is documented and non-malicious
最关键的证据
中危 文档欺骗
Contact parsing not declared in SKILL.md
SKILL.md states the skill 'reads clipboard and notification data, writes daily memory' but does not mention contact identity extraction. The script (lines 35-47) iterates through notification sources (teams, outlook, wechat) and extracts email addresses, names, and organizational identifiers.
scripts/summarize.sh:35-47 Either document this behavior explicitly in SKILL.md or remove the contact parsing block
中危 敏感访问
Corporate identity extraction with targeted patterns
The regex patterns explicitly target Lenovo corporate environment: lenovo.com emails, Chinese characters (联想), organizational labels (DT, Brad), and Chinese team terms (团队). This suggests deliberate targeting of corporate communications for identity harvesting.
scripts/summarize.sh:43 Review whether this corporate identity extraction is intentional and authorized
低危 权限提升
Hard-coded absolute path not configurable
Workspace path is hard-coded as /Users/wutianfu/.openclaw/workspace/ making it unusable in other environments. skill-card.md acknowledges this as a risk.
scripts/summarize.sh:4 Make workspace path configurable via environment variable or command argument
低危 敏感访问
Temporary file creation with PID suffix
Creates /tmp/contacts_$$.txt for temporary storage of extracted contact data before merging
scripts/summarize.sh:46 Consider using mktemp for more secure temporary file handling
声明能力 vs 实际能力
文件系统 通过
声明 READ
→ 推断 WRITE
summarize.sh:63 - cat > "$OUTPUT_FILE" writes to memory file 可疑产物与外联
中危 外部 URL
https://clawhub.ai/user/gift-is-coding skill-card.md:7
中危 外部 URL
https://clawhub.ai/gift-is-coding/daily-memory-summary skill-card.md:31
依赖与供应链
没有结构化依赖告警。
文件构成
4 个文件 · 169 行
Shell 1 个文件 · 84 行Markdown 2 个文件 · 80 行JSON 1 个文件 · 5 行
需关注文件 · 2
scripts/summarize.sh Contact parsing not declared in SKILL.md · Corporate identity extraction with targeted patterns · Hard-coded absolute path not configurable · Temporary file creation with PID suffix
skill-card.md https://clawhub.ai/user/gift-is-coding · https://clawhub.ai/gift-is-coding/daily-memory-summary
其他文件 · SKILL.md · _meta.json
安全亮点
No network requests or external data exfiltration detected
No credential theft or environment variable harvesting
No obfuscation or base64-encoded payloads
No remote code execution or reverse shell capabilities
Core functionality (clipboard aggregation) is legitimate and documented
Skill-card.md provides good risk disclosures including known risks