Skill Trust Decision

混合工作空间

工作空间存在大量硬编码凭证(API密钥/飞书密钥)分布在30+文件中,严重威胁密钥安全;SKILL.md描述与实际内容不符,工作空间目录混乱。

Install decision first Source: Manual upload Scanned: Apr 5, 2026
Files 614
Artifacts 256
Violations 4
Findings 5
Most direct threat evidence
Critical Credential Theft
大量硬编码阿里云API密钥

同一API密钥sk-1f3847debc3e492e81f64115b20c6d82在30+文件中出现,包括scripts/、skills/、memory/等目录,以及SKILL.md、openclaw.json等配置文件。任何获得工作空间访问权限的人都可以使用此密钥。

scripts/vectorize-and-store.py:19

Why this conclusion was reached

3/4 dimensions flagged
Block
Declared vs actual capability

4 undeclared or violating capabilities were inferred.

Block
Hidden execution and egress

9 high-risk artifacts or egress signals were extracted.

Block
Attack chain and severe findings

The report includes 0 attack-chain steps and 4 severe findings.

Review
Dependencies and supply chain hygiene

2 dependency or supply-chain issues need attention.

What drove the risk score up

硬编码API密钥 +35

同一密钥sk-1f3847debc3e492e81f64115b20c6d82在30+文件中出现,包括脚本/SKILL.md/memory/配置文件

飞书凭证硬编码 +15

openclaw.json包含app_secret和tenant_access_token

SKILL.md声明不符 +10

SKILL.md描述nano-banana-pro但实际包含大量不相关脚本和项目

hardcoded路径 +5

多处C:/Users/Xiabi路径暴露用户名和目录结构

Most important evidence

Critical Credential Theft

大量硬编码阿里云API密钥

同一API密钥sk-1f3847debc3e492e81f64115b20c6d82在30+文件中出现,包括scripts/、skills/、memory/等目录,以及SKILL.md、openclaw.json等配置文件。任何获得工作空间访问权限的人都可以使用此密钥。

scripts/vectorize-and-store.py:19
使用环境变量os.getenv('ALIYUN_API_KEY')替代硬编码,立即轮换该密钥
Critical Credential Theft

飞书应用凭证硬编码

openclaw.json包含飞书app_secret和tenant_access_token明文存储。

openclaw.json:14
将飞书凭证迁移至环境变量或加密存储,轮换所有已暴露的凭证
High Doc Mismatch

SKILL.md功能描述与实际不符

SKILL.md描述为'nano-banana-pro'图像生成技能,但工作空间包含大量不相关的脚本(向量搜索、TTS自动化、记忆系统等),目录结构混乱,无法确认主技能边界。

SKILL.md:1
重新组织工作空间结构,每个技能应有独立目录;主SKILL.md应准确描述实际功能
High Credential Theft

SKILL.md中硬编码API密钥

skills/tts-automation/SKILL.md第96行包含硬编码的阿里云API密钥,这在技能文档中完全不可接受。

skills/tts-automation/SKILL.md:96
从SKILL.md中移除所有硬编码密钥,使用环境变量引用
Medium Sensitive Access

Hardcoded Windows路径暴露用户信息

多个脚本包含C:/Users/Xiabi等硬编码路径,暴露系统用户名和目录结构。

scripts/vectorize-and-store.py:20
使用Path.home()或环境变量构建路径,避免硬编码

Declared capability vs actual capability

Filesystem Block
Declared READ
Inferred WRITE
多个脚本使用open()/write()写入文件
Network Block
Declared NONE
Inferred READ
脚本调用阿里云/飞书API
Shell Block
Declared NONE
Inferred WRITE
triple-line-sync.js使用execSync执行命令
Environment Block
Declared NONE
Inferred READ
os.environ读取API密钥

Suspicious artifacts and egress

Critical API Key
sk-1f3847debc3e492e81f64115b20c6d82

2026-3-10afu的js备份.txt:9

Critical API Key
sk-JPxFOBXYC8ieSrEN9OgCjYJ4V06XqkykhVtma4gw8ONxNuwE

2026-3-10afu的js备份.txt:55

Critical Dangerous Command
rm -rf /

skills/skill-vetting/references/patterns.md:20

High IP Address
120.0.0.0

expert-review-2026-03-09-browser-stealth-explained.md:47

High API Key
accessToken = "your_access_token"

feishu-calendar-integration.md:20

High API Key
api_key='sk-1f3847debc3e492e81f64115b20c6d82'

memory/2026-03-14.md:55

High API Key
API_KEY = "sk-1f3847debc3e492e81f64115b20c6d82"

scripts/vectorize-and-store.py:19

High API Key
API_KEY = 'sk-1f3847debc3e492e81f64115b20c6d82'

search_knowledge.py:22

High API Key
apiKey = "sk-1f3847debc3e492e81f64115b20c6d82"

skills/tts-automation/SKILL.md:96

Medium External URL
http://127.0.0.1:11434/v1

2026-3-10afu的js备份.txt:31

Medium External URL
https://api.xiaomimimo.com/anthropic

2026-3-10afu的js备份.txt:54

Medium External URL
https://open.bigmodel.cn/api/paas/v4

2026-3-10afu的js备份.txt:77

Dependencies and supply chain

PackageVersionSourceKnown vulnNotes
google-genai >=1.0.0 pip No 官方Google库
pillow >=10.0.0 pip No 图像处理库
dashscope * pip No 阿里云SDK,无版本锁定
langchain-chroma * pip No 向量数据库集成

File composition

614 files · 140626 lines
Markdown 320 files · 79463 linesHTML 86 files · 34309 linesPython 73 files · 9689 linesJSON 38 files · 7212 linesText 73 files · 6690 linesJavaScript 16 files · 2313 lines
Files of concern · 7
agents/config.json JSON · 50 lines
skills/feishu-multi-agent-manager/package-lock.json JSON · 5324 lines
https://opencollective.com/babel · https://opencollective.com/eslint · https://opencollective.com/typescript-eslint · https://opencollective.com/browserslist · https://tidelift.com/funding/github/npm/browserslist · https://tidelift.com/funding/github/npm/caniuse-lite · https://eslint.org/version-support · https://opencollective.com/fast-check · https://www.patreon.com/feross · https://feross.org/support · [email protected]
memory/2026-03-08.md Markdown · 2415 lines
https://feishu.cn/docx/U9PIdZ5SooMa9TxTXabcv8TGnhb · https://feishu.cn/docx/AafbdknDaoglGpx3RAvcluyUnAM · https://feishu.cn/docx/Mc5td0zf5oKY4bxHNRMc4E6Inyc · https://feishu.cn/docx/B52uds8WLo02Swx5SGdcfClxnSh · https://feishu.cn/docx/BiwWdBiUyoV8XzxrzL6cItginTh · https://feishu.cn/docx/NyVtdMB1NomyooxHnoTcHKw5nRh · https://feishu.cn/docx/NyVtdMB1NomyooxHnoTcHKw5nRh(V1.2,31 · https://feishu.cn/docx/AaC9dkA8QoAmAKx3hQqcLqFznRf(分块写入 · https://feishu.cn/docx/I49YdfIQ8omBxBxtW3Mc3PAWnBc · https://feishu.cn/docx/NTWmdppaWoxzpwxIjpQcZPiFn9f · https://feishu.cn/docx/CEoRdPxG2oiwlzxg9i9c9M1sngf · https://feishu.cn/docx/TNIVdysYHoJ0tex1wTMc5yE8nAc · https://feishu.cn/docx/AaC9dkA8QoAmAKx3hQqcLqFznRf(108 · https://feishu.cn/docx/AaC9dkA8QoAmAKx3hQqcLqFznRf(V1.1,追加 · https://feishu.cn/docx/AaC9dkA8QoAmAKx3hQqcLqFznRf(V1.2,追加 · https://weda.tencentcloudapi.com · https://tcb.cloud.tencent.com/dev · https://cloud.tencent.com/document/product/876 · https://servicewechat.com/wxa-dev-logic/download_redirect?type=win32_x64&from=mpwiki&download_version=2012510280&version_type=1 · https://mp.weixin.qq.com/ · https://mermaid.live/edit#pako:Sy9KLMhQ8AniUgACx+iMktwc3dSKgtSiEt2i1LLM1HKFMCM9g1gFXV07BafoZw1zn+...
memory/triple-line-sync-log.md Markdown · 1963 lines
https://scns3ak4jrto.feishu.cn/docx/GeG0dywMxof8dLx1tcUckSFNndh##
worklog.txt Text · 1784 lines
https://mermaid.live/edit#pako:Sy9KLMhQ8AniUgACx+iMktwc3dSKgtSiEt2i1LLM1HKFMCM9g1gFXV07BafoZw1zn+/e8nT9nqez9ynkZual5CYWxEK0glU4A1Xsfr578rOupU8ndj3tmv+ieS9E3iW6oCg/KzW5RLe4NDc3sagSaHxBflEJkvGu0U92dD7d2PRs3rZn8 · https://scns3ak4jrto.feishu.cn/docx/KaBld2wpyoKL5yxLYuPcSCPOne4 · https://scns3ak4jrto.feishu.cn/docx/GQsbd042WoNdbHxaBbscO9D8nW6 · https://scns3ak4jrto.feishu.cn/base/bascnZQh8v5K6d2m4E7p9Lr1tYw · https://feishu.cn/docx/NQCBdAXzeoBoi0xLJX7cPBHDnm3 · https://feishu.cn/docx/CvCBd5N2co0n02xXPZscQPEsnOL
memory/2026-03-07.md Markdown · 1386 lines
https://scns3ak4jrto.feishu.cn/docx/GeG0dywMxof8dLx1tcUckSFNndh
backups/html-expert-review-v2.0/SKILL.md Markdown · 1046 lines
https://mermaid.live/edit#pako:... · https://mermaid.live/edit · https://mermaid.live/edit#pako: · https://mermaid.live/edit#pako:$base64 · http://www.w3.org/2000/svg
Other files · index.js · people.txt · bom-物料管理规则 - 专家评点-v9-pyramid.html · SKILL.md · expert-review-2026-03-08-voice-redpacket-journey.html

Security positives

skill-vetting技能提供安全扫描能力,可检测恶意模式
self-improving-agent-cn技能设计合理,用于自我改进
base64使用在generate_image.py中为合法用途(解码API图像响应)
未发现eval()动态代码执行
未发现curl|bash远程脚本执行模式
未发现SSH/ AWS凭证文件访问模式