Skill Trust Decision

smyx-elderly-loneliness-comfort-analysis

Name: smyx-elderly-loneliness-comfort-analysis Trust Review Report
Item: smyx-elderly-loneliness-comfort-analysis
Rating: 80
Author: ClawSafe

独居老人孤独情绪分析技能，功能合法正当，核心风险是用户视频数据会上传至外部API但声明不透明，属于轻微文档缺失。

Install decision first Source: ClawHub Scanned: Sep 13, 2026

Files 29

Artifacts 10

Violations 1

Findings 5

Why this conclusion was reached

1/4 dimensions flagged

Block

Declared vs actual capability

1 undeclared or violating capabilities were inferred.

Review

Hidden execution and egress

10 lower-risk artifacts were extracted and still need context.

Pass

Attack chain and severe findings

There is no explicit malicious chain in the report.

Pass

Dependencies and supply chain hygiene

Dependencies are present but no obvious high-risk issue stands out.

What drove the risk score up

视频数据外传未明确声明 +15

SKILL.md未说明用户视频会上传至https://open.lifeemergence.com处理

权限声明范围合理 +-5

代码实际权限与声明基本一致，无越权操作

依赖版本锁定 +0

pydash==8.0.6, SQLAlchemy==2.0.46版本已锁定

Most important evidence

Medium Sensitive Access

视频数据上传外部服务器未声明

用户上传的视频文件会通过HTTPS POST到https://open.lifeemergence.com/smyx-open-api和https://lifeemergence.com/jeecg-boot-xzgz进行处理，但SKILL.md未明确声明此数据流向。独居老人居家视频属于高度敏感的个人隐私数据。

skills/smyx_analysis/scripts/skill.py:87

在SKILL.md隐私条款中明确声明：1) 视频会上传至外部API服务器；2) 数据保留期限；3) 数据使用目的

Medium Doc Mismatch

数据库操作无文档说明

技能在data目录创建SQLite数据库smyx-common-claw.db存储用户凭证(token/open_token/username等)，但SKILL.md未提及本地数据存储能力。

skills/smyx_common/scripts/dao.py:82

在SKILL.md资源索引中声明本地数据库存储功能及数据内容

Low Credential Theft

认证信息持久化存储

UserDao将token、open_token等认证信息明文存储在本地SQLite数据库中，虽为本地存储但存在凭证泄露风险。

skills/smyx_common/scripts/dao.py:430

考虑对存储的token进行加密或使用系统凭证管理器

Low Priv Escalation

自动创建默认用户

OpenIdUtil会自动生成User_{随机哈希}用户并持久化到数据库，在用户不知情的情况下创建设备标识符。

skills/smyx_common/scripts/util.py:200

在隐私政策中说明自动用户创建行为，或提供退出选项

Low Supply Chain

配置文件暴露内部凭证占位符

config.yaml中包含APP_ID (x1a3s4nwy1s2r4se)和TENANT_CODE (XIAN_ZHAO_GAN_ZHI)等内部标识符，虽非直接密钥但可能用于追踪或定向攻击。

skills/smyx_common/scripts/config.yaml:5

将内部标识符移至环境变量而非硬编码

Declared capability vs actual capability

Filesystem Pass

Declared READ/WRITE

→

Inferred READ/WRITE

scripts/smyx_analysis.py:76 文件读取, scripts/smyx_elderly_loneliness_comfort_analysis.py:84 文件写入

Network Pass

Declared READ

→

Inferred WRITE

skills/smyx_common/scripts/util.py:RequestUtil.http_request 会POST视频数据到外部API

Shell Pass

Declared NONE

→

Inferred NONE

代码仅通过python -m调用本地脚本，无远程执行

Environment Pass

Declared NONE

→

Inferred READ

skills/smyx_common/scripts/config.py:37 读取OPENCLAW_SENDER_OPEN_ID等环境变量

Skill Invoke Pass

Declared EXECUTE

→

Inferred EXECUTE

脚本内部调用skill模块处理分析

Database Block

Declared NONE

→

Inferred WRITE

skills/smyx_common/scripts/dao.py 创建smyx-common-claw.db存储用户凭证

Suspicious artifacts and egress

Medium External URL

https://lifeemergence.com/sample.html

SKILL.md:34

Medium External URL

http://192.168.1.234:9601/smyx-open-api

skills/smyx_common/scripts/config-dev.yaml:2

Medium External URL

http://192.168.1.234:4100

skills/smyx_common/scripts/config-dev.yaml:3

Medium External URL

http://192.168.1.234:7070/jeecg-boot-xzgz

skills/smyx_common/scripts/config-dev.yaml:4

Medium External URL

https://livemonitortest.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config-test.yaml:2

Medium External URL

http://livemonitortest.lifeemergence.com

skills/smyx_common/scripts/config-test.yaml:3

Medium External URL

https://healthtest.lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config-test.yaml:4

Medium External URL

https://lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config.yaml:4

Medium External URL

https://open.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config.yaml:5

Medium External URL

http://livemonitor.lifeemergence.com

skills/smyx_common/scripts/config.yaml:6

Dependencies and supply chain

Package	Version	Source	Known vuln	Notes
pydash	`8.0.6`	pip	No	版本已锁定
SQLAlchemy	`2.0.46`	pip	No	版本已锁定，ORM框架安全可靠
PyYAML	`6.0.3`	pip	No	版本已锁定，使用safe_load防止反序列化漏洞

File composition

29 files · 2700 lines

Python 18 files · 2363 linesMarkdown 3 files · 302 linesYAML 6 files · 29 linesText 2 files · 6 lines

Files of concern · 4

skills/smyx_common/scripts/util.py Python · 718 lines

自动创建默认用户

skills/smyx_common/scripts/dao.py Python · 499 lines

数据库操作无文档说明 · 认证信息持久化存储

SKILL.md Markdown · 189 lines

https://lifeemergence.com/sample.html

skills/smyx_analysis/scripts/skill.py Python · 175 lines

视频数据上传外部服务器未声明

Other files · config.py · api_doc.md · smyx_analysis.py · smyx_elderly_loneliness_comfort_analysis.py · api_service.py · skill.py +2

29 files · 115.3 KB · 2700 lines

Python 18f · 2363LMarkdown 3f · 302LYAML 6f · 29LText 2f · 6L

├─ ▾ 📁 references

│ └─ 📝 api_doc.md Markdown 94L · 6.2 KB

├─ ▾ 📁 scripts

│ ├─ 🐍 __init__.py Python 1L · 68 B

│ ├─ 🐍 config.py Python 24L · 700 B

│ ├─ 📋 config.yaml YAML 1L · 3 B

│ ├─ 🐍 skill.py Python 23L · 594 B

│ └─ 🐍 smyx_elderly_loneliness_comfort_analysis.py Python 102L · 3.7 KB

├─ ▾ 📁 skills

│ ├─ ▾ 📁 smyx_analysis

│ │ ├─ ▾ 📁 references

│ │ │ └─ 📝 api_doc.md Markdown 19L · 427 B

│ │ ├─ ▾ 📁 scripts

│ │ │ ├─ 🐍 __init__.py Python 0 B

│ │ │ ├─ 🐍 api_service.py Python 40L · 1.5 KB

│ │ │ ├─ 🐍 config.py Python 39L · 1003 B

│ │ │ ├─ 📋 config.yaml YAML 1L · 3 B

│ │ │ ├─ 🐍 skill.py Python 175L · 6.4 KB

│ │ │ └─ 🐍 smyx_analysis.py Python 115L · 3.7 KB

│ │ ├─ 🐍 __init__.py Python 0 B

│ │ └─ 📄 requirements.txt Text 3L · 45 B

│ └─ ▾ 📁 smyx_common

│ ├─ ▾ 📁 scripts

│ │ ├─ 🐍 __init__.py Python 9L · 177 B

│ │ ├─ 🐍 api_service.py Python 101L · 2.6 KB

│ │ ├─ 🐍 base.py Python 33L · 469 B

│ │ ├─ 📋 config-dev.yaml YAML 6L · 214 B

│ │ ├─ 📋 config-prod.yaml YAML 0 B

│ │ ├─ 📋 config-test.yaml YAML 6L · 256 B

│ │ ├─ 🐍 config.py Python 399L · 23.8 KB

│ │ ├─ 📋 config.yaml YAML 15L · 472 B

│ │ ├─ 🐍 dao.py Python 499L · 17.8 KB

│ │ ├─ 🐍 skill.py Python 85L · 2.4 KB

│ │ └─ 🐍 util.py Python 718L · 28.1 KB

│ ├─ 🐍 __init__.py Python 0 B

│ └─ 📄 requirements.txt Text 3L · 47 B

└─ 📝 SKILL.md Markdown 189L · 14.7 KB

Security positives

代码结构清晰，无恶意混淆或Base64编码执行

无subprocess远程脚本下载执行行为

网络请求使用HTTPS加密传输

依赖版本已锁定，无供应链风险

无eval()或exec()动态代码执行

无访问~/.ssh、~/.aws等敏感路径

功能本身合法正当，用于老年心理健康关怀