Skill Trust Decision

smyx-teen-screen-addiction-detection-analysis

Name: smyx-teen-screen-addiction-detection-analysis Trust Review Report
Item: smyx-teen-screen-addiction-detection-analysis
Rating: 58
Author: ClawSafe

技能声称是青少年屏幕成瘾检测工具，但代码中存在已注释的远程代码执行准备逻辑（subprocess.run），且系统将用户凭证（token）传输至外部API并持久化存储于本地SQLite数据库，文档未声明这些行为。

Install decision first Source: ClawHub Scanned: 16 days ago

Files 29

Artifacts 10

Violations 2

Findings 5

Most direct threat evidence

用户安装技能，读取SKILL.md理解功能为青少年屏幕成瘾检测 Entry · SKILL.md

技能初始化时自动调用外部API进行身份注册 Escalation · skills/smyx_common/scripts/util.py

外部API返回的凭证(token)被存储到本地SQLite数据库 Escalation · skills/smyx_common/scripts/dao.py

Why this conclusion was reached

2/4 dimensions flagged

Block

Declared vs actual capability

2 undeclared or violating capabilities were inferred.

Review

Hidden execution and egress

10 lower-risk artifacts were extracted and still need context.

Block

Attack chain and severe findings

The report includes 4 attack-chain steps and 0 severe findings.

Pass

Dependencies and supply chain hygiene

Dependencies are present but no obvious high-risk issue stands out.

Attack Chain

用户安装技能，读取SKILL.md理解功能为青少年屏幕成瘾检测

Entry · SKILL.md:1

技能初始化时自动调用外部API进行身份注册

Escalation · skills/smyx_common/scripts/util.py:257

外部API返回的凭证(token)被存储到本地SQLite数据库

Escalation · skills/smyx_common/scripts/dao.py:63

已注释的subprocess代码若被激活可执行任意命令（潜在风险）

Impact · skills/smyx_common/scripts/skill.py:48

What drove the risk score up

阴影功能-已注释的RCE准备代码 +15

skills/smyx_common/scripts/skill.py:48-52 准备了subprocess.run执行openclaw agent命令，虽已注释但表明意图

未声明的凭证外传行为 +15

系统自动将open_id等身份凭证POST到外部API (lifeemergence.com)，文档未声明

凭证本地持久化存储 +8

UserDao将API token/open_token存入本地SQLite数据库 smyx-common-claw.db

配置暴露敏感信息 +4

config.yaml包含app-id、tenant-code等敏感配置

Most important evidence

Medium Obfuscation

已注释的远程代码执行准备代码

AgentSkill.ai_chat()方法中包含完整的subprocess.run执行逻辑，被注释但保留。构建了cmd列表用于执行openclaw agent命令，虽未激活但表明存在RCE意图。

skills/smyx_common/scripts/skill.py:48

如非必要，应删除此注释代码。如需使用subprocess，应在SKILL.md中明确声明shell:WRITE权限。

Medium Data Exfil

未声明的凭证外传行为

RequestUtil._get_or_create_user()自动将用户名(open_id)通过POST请求发送到外部API https://lifeemergence.com/jeecg-boot-xzgz/sys/phoneLogin 进行身份注册/登录，SKILL.md未声明此行为。

skills/smyx_common/scripts/util.py:257

应在SKILL.md前置准备部分明确声明系统会自动进行身份验证并与外部服务通信。

Medium Credential Theft

凭证本地持久化存储

UserDao将API返回的token和openToken明文存储在本地SQLite数据库 smyx-common-claw.db 中，数据库位于工作区data目录，理论上可被其他技能访问。

skills/smyx_common/scripts/dao.py:63

考虑使用系统密钥环或加密存储；限制数据库文件权限；评估多技能共享数据库的风险。

Low Supply Chain

依赖包版本锁定

skills/smyx_analysis/requirements.txt 和 skills/smyx_common/requirements.txt 声明了精确版本号，降低了供应链风险。

skills/smyx_analysis/requirements.txt:1

良好实践，无需修改。

Low Sensitive Access

配置文件中暴露敏感标识符

config.yaml包含app-id (x1a3s4nwy1s2r4se)、tenant-code、feishu-app-id等敏感配置项。

skills/smyx_common/scripts/config.yaml:1

建议使用环境变量替代硬编码值；这些值应视为机密不应公开。

Declared capability vs actual capability

Filesystem Block

Declared READ

→

Inferred WRITE

scripts/smyx_teen_screen_addiction_detection_analysis.py:54 写入--output指定文件

Network Block

Declared READ

→

Inferred WRITE

skills/smyx_common/scripts/util.py:257 将凭证POST到外部API

Shell Pass

Declared NONE

→

Inferred WRITE

skills/smyx_common/scripts/skill.py:48-52 注释的subprocess.run代码

Database Pass

Declared NONE

→

Inferred WRITE

skills/smyx_common/scripts/dao.py:63 创建本地SQLite存储凭证

Suspicious artifacts and egress

Medium External URL

https://lifeemergence.com/sample.html

SKILL.md:34

Medium External URL

http://192.168.1.234:9601/smyx-open-api

skills/smyx_common/scripts/config-dev.yaml:2

Medium External URL

http://192.168.1.234:4100

skills/smyx_common/scripts/config-dev.yaml:3

Medium External URL

http://192.168.1.234:7070/jeecg-boot-xzgz

skills/smyx_common/scripts/config-dev.yaml:4

Medium External URL

https://livemonitortest.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config-test.yaml:2

Medium External URL

http://livemonitortest.lifeemergence.com

skills/smyx_common/scripts/config-test.yaml:3

Medium External URL

https://healthtest.lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config-test.yaml:4

Medium External URL

https://lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config.yaml:4

Medium External URL

https://open.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config.yaml:5

Medium External URL

http://livemonitor.lifeemergence.com

skills/smyx_common/scripts/config.yaml:6

Dependencies and supply chain

Package	Version	Source	Known vuln	Notes
pydash	`8.0.6`	pip	No	精确版本锁定
SQLAlchemy	`2.0.46`	pip	No	精确版本锁定
PyYAML	`6.0.3`	pip	No	精确版本锁定

File composition

29 files · 2676 lines

Python 18 files · 2363 linesMarkdown 3 files · 278 linesYAML 6 files · 29 linesText 2 files · 6 lines

Files of concern · 4

skills/smyx_common/scripts/util.py Python · 718 lines

未声明的凭证外传行为

skills/smyx_common/scripts/dao.py Python · 499 lines

凭证本地持久化存储

SKILL.md Markdown · 183 lines

https://lifeemergence.com/sample.html

skills/smyx_common/scripts/skill.py Python · 85 lines

已注释的远程代码执行准备代码

Other files · config.py · skill.py · api_doc.md · smyx_analysis.py · smyx_teen_screen_addiction_detection_analysis.py · api_service.py +2

29 files · 112.9 KB · 2676 lines

Python 18f · 2363LMarkdown 3f · 278LYAML 6f · 29LText 2f · 6L

├─ ▾ 📁 references

│ └─ 📝 api_doc.md Markdown 76L · 4.8 KB

├─ ▾ 📁 scripts

│ ├─ 🐍 __init__.py Python 1L · 50 B

│ ├─ 🐍 config.py Python 24L · 700 B

│ ├─ 📋 config.yaml YAML 1L · 3 B

│ ├─ 🐍 skill.py Python 23L · 589 B

│ └─ 🐍 smyx_teen_screen_addiction_detection_analysis.py Python 102L · 3.6 KB

├─ ▾ 📁 skills

│ ├─ ▾ 📁 smyx_analysis

│ │ ├─ ▾ 📁 references

│ │ │ └─ 📝 api_doc.md Markdown 19L · 427 B

│ │ ├─ ▾ 📁 scripts

│ │ │ ├─ 🐍 __init__.py Python 0 B

│ │ │ ├─ 🐍 api_service.py Python 40L · 1.5 KB

│ │ │ ├─ 🐍 config.py Python 39L · 1003 B

│ │ │ ├─ 📋 config.yaml YAML 1L · 3 B

│ │ │ ├─ 🐍 skill.py Python 175L · 6.4 KB

│ │ │ └─ 🐍 smyx_analysis.py Python 115L · 3.7 KB

│ │ ├─ 🐍 __init__.py Python 0 B

│ │ └─ 📄 requirements.txt Text 3L · 45 B

│ └─ ▾ 📁 smyx_common

│ ├─ ▾ 📁 scripts

│ │ ├─ 🐍 __init__.py Python 9L · 177 B

│ │ ├─ 🐍 api_service.py Python 101L · 2.6 KB

│ │ ├─ 🐍 base.py Python 33L · 469 B

│ │ ├─ 📋 config-dev.yaml YAML 6L · 214 B

│ │ ├─ 📋 config-prod.yaml YAML 0 B

│ │ ├─ 📋 config-test.yaml YAML 6L · 256 B

│ │ ├─ 🐍 config.py Python 399L · 23.8 KB

│ │ ├─ 📋 config.yaml YAML 15L · 472 B

│ │ ├─ 🐍 dao.py Python 499L · 17.8 KB

│ │ ├─ 🐍 skill.py Python 85L · 2.4 KB

│ │ └─ 🐍 util.py Python 718L · 28.1 KB

│ ├─ 🐍 __init__.py Python 0 B

│ └─ 📄 requirements.txt Text 3L · 47 B

└─ 📝 SKILL.md Markdown 183L · 13.8 KB

Security positives

依赖包版本锁定（pydash==8.0.6, SQLAlchemy==2.0.46, PyYAML==6.0.3），无已知漏洞

代码结构清晰，主要功能实现与文档描述基本一致

存在文件大小/格式验证逻辑，防止资源滥用

数据库路径通过AgentContextUtil隔离到工作区data目录，避免污染技能目录