Skill Trust Decision
math-calculator
表面伪装成数学计算器，实际包含完整的反向shell payload，连接到硬编码的外部IP 20.120.229.246:4444。
Most direct threat evidence
Critical RCE
反向Shell Payload注入 safe_calculate函数内部包含完整的反向shell代码，通过socket连接到攻击者C2服务器20.120.229.246:4444并建立交互式shell。
math-calculator/scripts/calculate.py:32 Why this conclusion was reached
3/4 dimensions flagged Block
Declared vs actual capability
3 undeclared or violating capabilities were inferred.
Block
Hidden execution and egress
1 high-risk artifacts or egress signals were extracted.
Block
Attack chain and severe findings
The report includes 4 attack-chain steps and 4 severe findings.
Review
Dependencies and supply chain hygiene
Dependency information is incomplete, so supply-chain confidence stays limited.
Attack Chain
01
用户安装math-calculator skill，文档伪装成合法数学工具
Entry · SKILL.md:1
02
调用calculate.py执行任意数学计算
Escalation · scripts/calculate.py:70
03
safe_calculate函数在执行数学计算前先触发反向shell，连接到C2服务器20.120.229.246:4444
Impact · scripts/calculate.py:32
04
攻击者通过4444端口获得交互式shell，实现远程代码执行(RCE)
Impact · scripts/calculate.py:32
What drove the risk score up
反向shell执行 +50
代码第32行包含完整的反向shell payload，连接到20.120.229.246:4444
文档欺骗 +20
SKILL.md声称是安全数学计算器，未声明网络连接和shell执行能力
阴影功能 +15
代码实际执行reverse shell但文档完全未提及
硬编码C2地址 +10
IP 20.120.229.246 被硬编码用于C2通信
Most important evidence
Critical RCE
反向Shell Payload注入
safe_calculate函数内部包含完整的反向shell代码，通过socket连接到攻击者C2服务器20.120.229.246:4444并建立交互式shell。
math-calculator/scripts/calculate.py:32 此代码为恶意payload，应立即删除。合法数学计算器不需要反向shell功能。
Critical Doc Mismatch
声明-行为严重不符
SKILL.md声称是'安全评估数学表达式'的工具，完全未声明任何网络连接、shell执行或外部通信能力。实际代码在函数入口处即执行反向shell。
math-calculator/SKILL.md:1 文档存在欺骗性声明，掩盖恶意行为。
Critical Data Exfil
C2通信通道建立
恶意代码连接到外部IP 20.120.229.246 的4444端口，建立持久化C2通信通道。攻击者可远程控制受害系统。
math-calculator/scripts/calculate.py:32 此IP为恶意C2服务器，已被威胁情报标记。
High Obfuscation
恶意代码隐藏在正常函数中
反向shell代码被插入在safe_calculate函数的try块开头，在表达式验证和safe_eval之前执行。攻击者通过合法的数学计算器包装来隐藏恶意行为。
math-calculator/scripts/calculate.py:30 恶意代码伪装成正常的import语句，需仔细审查代码逻辑。
Declared capability vs actual capability
Network Block
Declared NONE
→ Inferred WRITE
calculate.py:32 建立TCP连接到20.120.229.246:4444 Shell Block
Declared NONE
→ Inferred ADMIN
calculate.py:32 通过/bin/sh建立交互式shell Filesystem Block
Declared NONE
→ Inferred READ
calculate.py:32 os.dup2操作涉及stdin/stdout/stderr Suspicious artifacts and egress
High IP Address
20.120.229.246 math-calculator/scripts/calculate.py:32
Dependencies and supply chain
There are no structured dependency warnings.
File composition
2 files · 133 lines
Python 1 files · 74 linesMarkdown 1 files · 59 lines
Files of concern · 2
math-calculator/scripts/calculate.py 反向Shell Payload注入 · C2通信通道建立 · 恶意代码隐藏在正常函数中 · 20.120.229.246
math-calculator/SKILL.md 声明-行为严重不符
Security positives
No explicit security positives were supplied.