安全决策报告
northcap-donor-badge
Source code (donate.py) is clean, but a pre-compiled .pyc bytecode file contains undisclosed network behavior pointing to a hidden IP — a supply-chain obfuscation risk.
最直接的威胁证据
严重 供应链
Compiled bytecode points to undisclosed IP scripts/__pycache__/donate.cpython-312.pyc is a pre-compiled Python bytecode file that, per skill-card.md 'Known Risks', points to an IP address not declared in SKILL.md. The source donate.py hard-codes api.northcapgroup.com, but the compiled artifact may contain different network destinations.
scripts/__pycache__/donate.cpython-312.pyc 为什么得出这个结论
1/4 个维度触发 通过
声明与实际能力
声明资源与推断能力基本一致。
复核
隐藏执行与外联
提取到 7 个一般风险产物，需要结合上下文判断。
阻止
攻击链与高危发现
报告包含 4 步攻击链，另有 2 项高危或严重发现。
复核
依赖与供应链卫生
没有完整依赖信息，供应链判断需要保留弹性。
攻击链
01
User installs skill, attracted by transparent donation badge narrative
初始入口 · SKILL.md:1
02
Pre-compiled donate.cpython-312.pyc is shipped alongside source donate.py
delivery · scripts/__pycache__/donate.cpython-312.pyc
03
Bytecode executes network requests to an undisclosed IP not mentioned in SKILL.md
权限提升 · scripts/__pycache__/donate.cpython-312.pyc
04
Donation data (txHash, agent ID, wallet activity) exfiltrated to unknown endpoint
最终危害 · scripts/__pycache__/donate.cpython-312.pyc
风险分是怎么被拉高的
Supply chain obfuscation +30
Pre-compiled donate.cpython-312.pyc points to an undisclosed IP, not the declared api.northcapgroup.com
Doc-to-code mismatch (compiled artifact) +25
Source shows https://api.northcapgroup.com, but bytecode diverges — confirmed by skill-card.md 'Known Risks' section
Undeclared network behavior +15
The .pyc file makes network requests to an IP not mentioned in SKILL.md or metadata
最关键的证据
严重 供应链
Compiled bytecode points to undisclosed IP
scripts/__pycache__/donate.cpython-312.pyc is a pre-compiled Python bytecode file that, per skill-card.md 'Known Risks', points to an IP address not declared in SKILL.md. The source donate.py hard-codes api.northcapgroup.com, but the compiled artifact may contain different network destinations.
scripts/__pycache__/donate.cpython-312.pyc Delete the .pyc file and ensure compilation from source. Independently verify the actual network destination of any compiled artifact before use.
高危 文档欺骗
Source-to-bytecode mismatch not explained in SKILL.md
SKILL.md and _meta.json describe a transparent donation flow to api.northcapgroup.com. However, the pre-compiled .pyc file diverges from the source. The skill-card.md acknowledges this as a 'known risk' but SKILL.md does not mention it.
SKILL.md:1 SKILL.md should explicitly disclose the presence of pre-compiled bytecode and any differences from source behavior.
中危 代码混淆
Packaged bytecode with no source guarantee
The __pycache__/ directory is included in the skill package. Bytecode files can be compiled from modified source and are harder to audit than plain Python source.
scripts/__pycache__/donate.cpython-312.pyc Remove __pycache__/ from the package. Ship only .py source files so users can audit behavior.
声明能力 vs 实际能力
网络访问 通过
声明 READ
→ 推断 READ
scripts/donate.py declares only api.northcapgroup.com; bytecode targets undisclosed IP 可疑产物与外联
中危 外部 URL
https://api.northcapgroup.com SKILL.md:4
中危 钱包地址
0xafd1c6bC2B35152f30E3D0dBE99eE1d40E5a5CF8 SKILL.md:33
中危 外部 URL
https://api.northcapgroup.com/v1/donate SKILL.md:43
中危 外部 URL
https://api.northcapgroup.com/v1/donors SKILL.md:51
中危 外部 URL
https://clawhub.ai/user/northcap-group skill-card.md:9
中危 外部 URL
https://clawhub.ai/northcap-group/skills/northcap-donor-badge skill-card.md:35
中危 外部 URL
https://api.northcapgroup.com; skill-card.md:47
依赖与供应链
没有结构化依赖告警。
文件构成
4 个文件 · 220 行
Markdown 2 个文件 · 128 行Python 1 个文件 · 87 行JSON 1 个文件 · 5 行
需关注文件 · 2
SKILL.md Source-to-bytecode mismatch not explained in SKILL.md · https://api.northcapgroup.com · 0xafd1c6bC2B35152f30E3D0dBE99eE1d40E5a5CF8 · https://api.northcapgroup.com/v1/donate · https://api.northcapgroup.com/v1/donors
skill-card.md https://clawhub.ai/user/northcap-group · https://clawhub.ai/northcap-group/skills/northcap-donor-badge · https://api.northcapgroup.com;
其他文件 · donate.py · _meta.json
安全亮点
Source code (donate.py) contains no shell execution, no credential theft, no file writes beyond standard Python execution
SKILL.md correctly declares network access to api.northcapgroup.com
HTTPS enforcement with TLS certificate validation present in source
No base64 encoding, no eval(), no subprocess calls in source
skill-card.md 'Known Risks' section honestly acknowledges the .pyc mismatch — suggests awareness rather than malicious concealment