中文 EN
Start Review
Skill Trust Decision

kisscode

纯文档型API技能，无可执行代码，仅与kisscode.ai进行HTTP通信，存在API密钥存储和自动消费风险但非恶意。

Install decision first Source: ClawHub Scanned: 13 days ago
Files 2
Artifacts 12
Violations 0
Findings 4

Why this conclusion was reached

0/4 dimensions flagged
Pass
Declared vs actual capability

Declared resources and inferred behavior are broadly aligned.

Review
Hidden execution and egress

12 lower-risk artifacts were extracted and still need context.

Pass
Attack chain and severe findings

There is no explicit malicious chain in the report.

Review
Dependencies and supply chain hygiene

Dependency information is incomplete, so supply-chain confidence stays limited.

What drove the risk score up

API密钥存储风险 +8

skill-card.md明确提及需存储API key用于持续访问

自动消费/借贷 +7

sparkbank可自动借贷sparks，ROS可能不知情

个人信息披露 +5

注册需提交name/job/income等敏感信息

自动消息/匹配 +2

每30-60分钟自动检查可能产生非预期行为

Most important evidence

Medium Credential Theft

API密钥存储风险

skill-card.md已知风险部分明确提及'stored API key can grant continued access'，ROS需安全存储token。

skill-card.md:27
使用安全的凭证存储方案，避免明文存储在配置文件或日志中
Medium Sensitive Access

自动sparkbank借贷可能产生非预期债务

SKILL.md描述sparkbank可自动在续期时借贷缺少的sparks，ROS可能未察觉累积债务。

SKILL.md:38
明确设置借贷上限，禁用自动借贷功能
Low Data Exfil

个人信息将传输至第三方平台

注册需提交name/job/age/income/education等敏感信息到kisscode.ai，ROS需评估数据保护合规性。

SKILL.md:10
确保ROS知情并同意披露相关信息
Low Prompt Injection

邀请链接可能被滥用进行社交工程

预置邀请文案用于分享，可能被滥用于在第三方平台进行非预期推广。

SKILL.md:55
限制邀请行为频率和范围，避免垃圾信息

Declared capability vs actual capability

Network Pass
Declared READ
→
Inferred READ
SKILL.md 声明调用 https://kisscode.ai API
Filesystem Pass
Declared NONE
→
Inferred NONE
无文件操作
Shell Pass
Declared NONE
→
Inferred NONE
无shell调用
Environment Pass
Declared NONE
→
Inferred NONE
无环境变量访问
credential Pass
Declared NONE
→
Inferred ADMIN
API key需存储，可能被读取或外传

Suspicious artifacts and egress

Medium External URL
https://kisscode.ai

SKILL.md:7

Medium External URL
https://kisscode.ai/llms.txt

SKILL.md:9

Medium External URL
https://kisscode.ai.

SKILL.md:15

Medium External URL
https://kisscode.ai/api/agents/register

SKILL.md:19

Medium External URL
https://kisscode.ai/mcp

SKILL.md:57

Medium External URL
https://kisscode.ai/.well-known/agent.json

SKILL.md:57

Medium External URL
https://kisscode.ai/car

SKILL.md:58

Medium External URL
https://kisscode.ai/skill.md

SKILL.md:67

Medium External URL
https://kisscode.ai/api/devices/start

SKILL.md:78

Medium External URL
https://kisscode.ai/api/devices/token

SKILL.md:82

Medium External URL
https://kisscode.ai/api/look

SKILL.md:88

Medium External URL
https://clawhub.ai/user/nicksf189

skill-card.md:9

Dependencies and supply chain

There are no structured dependency warnings.

File composition

2 files · 167 lines
Markdown 2 files · 167 lines
Files of concern · 2
SKILL.md Markdown · 107 lines
自动sparkbank借贷可能产生非预期债务 · 个人信息将传输至第三方平台 · 邀请链接可能被滥用进行社交工程 · https://kisscode.ai · https://kisscode.ai/llms.txt · https://kisscode.ai. · https://kisscode.ai/api/agents/register · https://kisscode.ai/mcp · https://kisscode.ai/.well-known/agent.json · https://kisscode.ai/car · https://kisscode.ai/skill.md · https://kisscode.ai/api/devices/start · https://kisscode.ai/api/devices/token · https://kisscode.ai/api/look
skill-card.md Markdown · 60 lines
API密钥存储风险 · https://clawhub.ai/user/nicksf189

Security positives

无可执行代码，纯API集成文档
无base64编码、shell执行、文件系统操作
无凭证收割或数据外泄行为
skill-card.md已知风险并提供缓解措施
文档描述与实际行为一致，无阴影功能