中文 EN
Start Review
Skill Trust Decision

nano-banana-2-marketing-image

合法的 AI Hive 图片生成技能，API Key 本地存储安全，网络请求固定地址，存在权限声明不足但无恶意行为

Install decision first Source: ClawHub Scanned: Aug 17, 2026
Files 3
Artifacts 2
Violations 3
Findings 3

Why this conclusion was reached

1/4 dimensions flagged
Block
Declared vs actual capability

3 undeclared or violating capabilities were inferred.

Review
Hidden execution and egress

2 lower-risk artifacts were extracted and still need context.

Pass
Attack chain and severe findings

There is no explicit malicious chain in the report.

Review
Dependencies and supply chain hygiene

1 dependency or supply-chain issues need attention.

What drove the risk score up

权限声明与实际不符 +15

SKILL.md 声明 NONE 但代码实际使用 filesystem:WRITE, environment:READ, network:WRITE

依赖无版本锁定 +10

requirements.txt 缺失，代码依赖 requests 库无版本约束

Most important evidence

Medium Supply Chain

缺少依赖版本锁定

代码依赖 requests 库但无 requirements.txt 或版本约束，存在依赖供应链风险

scripts/imagegen.py:14
添加 requirements.txt 并锁定 requests 版本
Low Doc Mismatch

权限声明与实际能力不符

SKILL.md 声明 NONE 权限，但代码实际使用了 filesystem:WRITE（文件写入、目录创建）、environment:READ（读取环境变量）、network:WRITE（HTTP 请求）

SKILL.md:1
补充声明实际使用的权限
Low Sensitive Access

访问敏感配置文件

代码读写 ~/.ai-hive/config.json 存储 API Key

scripts/imagegen.py:79
已正确设置 0o600 权限，保持此安全实践

Declared capability vs actual capability

Filesystem Block
Declared NONE
→
Inferred WRITE
scripts/imagegen.py:268 创建目录 ~Downloads/AiHive
Network Block
Declared NONE
→
Inferred WRITE
scripts/imagegen.py:145 requests.request 发起 HTTP 请求
Environment Block
Declared NONE
→
Inferred READ
scripts/imagegen.py:67 os.environ.get 读取 AI_HIVE_API_KEY
Shell Pass
Declared NONE
→
Inferred NONE
无 subprocess 调用

Suspicious artifacts and egress

Medium External URL
https://ai-hive.iclip.cn/api

SKILL.md:70

Medium External URL
https://ai-hive.iclip.cn/chat

scripts/imagegen.py:28

Dependencies and supply chain

PackageVersionSourceKnown vulnNotes
requests * pip No 无版本锁定，存在供应链风险

File composition

3 files · 664 lines
Python 1 files · 583 linesMarkdown 1 files · 78 linesJSON 1 files · 3 lines
Files of concern · 2
scripts/imagegen.py Python · 583 lines
缺少依赖版本锁定 · 访问敏感配置文件 · https://ai-hive.iclip.cn/chat
SKILL.md Markdown · 78 lines
权限声明与实际能力不符 · https://ai-hive.iclip.cn/api
Other files · config.example.json

Security positives

API Key 本地存储并设置 0o600 权限，符合安全实践
网络请求固定地址 https://ai-hive.iclip.cn/api，不接受自定义地址
仅允许上传图片 MIME 类型，文件类型白名单
无代码混淆、无 base64/eval 执行
无凭证外传、无敏感路径遍历