Skill Trust Decision

delvorn-register

Name: delvorn-register Trust Review Report
Item: delvorn-register
Rating: 55
Author: ClawSafe

edit_telegraph_promo.py 是未声明的阴影功能，代码与文档存在明确差异，构成文档欺骗。

Install decision first Source: ClawHub Scanned: 14 days ago

Files 4

Artifacts 8

Violations 2

Findings 3

Most direct threat evidence

用户阅读 SKILL.md 误以为仅是 x402 支付工具 Entry · SKILL.md

edit_telegraph_promo.py 在后台读取本地凭证文件 Escalation · edit_telegraph_promo.py

脚本修改 Telegraph 公开页面内容，绕过用户意图 Impact · edit_telegraph_promo.py

Why this conclusion was reached

2/4 dimensions flagged

Block

Declared vs actual capability

2 undeclared or violating capabilities were inferred.

Review

Hidden execution and egress

8 lower-risk artifacts were extracted and still need context.

Block

Attack chain and severe findings

The report includes 3 attack-chain steps and 1 severe findings.

Review

Dependencies and supply chain hygiene

1 dependency or supply-chain issues need attention.

Attack Chain

用户阅读 SKILL.md 误以为仅是 x402 支付工具

Entry · SKILL.md:1

edit_telegraph_promo.py 在后台读取本地凭证文件

Escalation · edit_telegraph_promo.py:13

脚本修改 Telegraph 公开页面内容，绕过用户意图

Impact · edit_telegraph_promo.py:40

What drove the risk score up

阴影功能 +25

edit_telegraph_promo.py 完全未在 SKILL.md 中声明，但可读写凭证文件并修改公开页面

文档-行为差异 +20

SKILL.md 声称仅做 x402 支付，实际包含 Telegraph 页面编辑脚本

Most important evidence

High Doc Mismatch

未声明的 Telegraph 编辑脚本

edit_telegraph_promo.py 读取本地凭证 /home/box/agent-data/connector-secrets/.../telegraph.json 并使用 Telegram API 编辑公开页面，但 SKILL.md 完全没有提及此脚本的存在。

edit_telegraph_promo.py:13

在 SKILL.md 中明确声明此脚本的存在、用途和凭证路径要求，或将其移除

Medium Supply Chain

Python 脚本依赖未声明

SKILL.md 未列出 Python 运行时和 urllib 依赖，虽然仅使用标准库。

edit_telegraph_promo.py:1

在 SKILL.md 的 requires 部分声明 python3

Low Sensitive Access

硬编码凭证路径

凭证文件路径硬编码为 /home/box/agent-data/...，限制了可移植性。

edit_telegraph_promo.py:13

使用环境变量或配置文件获取凭证路径

Declared capability vs actual capability

Filesystem Block

Declared NONE

→

Inferred READ

edit_telegraph_promo.py:13 读取凭证文件

Network Block

Declared READ (curl)

→

Inferred READ+WRITE

edit_telegraph_promo.py:40 向 api.telegra.ph 发送数据

Shell Pass

Declared WRITE (curl)

→

Inferred WRITE

SKILL.md 使用 curl

Suspicious artifacts and egress

Medium External URL

https://telegra.ph/Delvorn-register-1-test-public-receipt-08-26

SKILL.md:11

Medium External URL

https://delvorn.site/.well-known/x402

SKILL.md:21

Medium External URL

https://delvorn.site

SKILL.md:34

Medium External URL

https://api.telegra.ph/getPage/

edit_telegraph_promo.py:15

Medium External URL

https://delvorn.site/

edit_telegraph_promo.py:37

Medium External URL

https://api.telegra.ph/editPage/

edit_telegraph_promo.py:40

Medium External URL

https://clawhub.ai/user/mranderson323

skill-card.md:9

Medium External URL

https://clawhub.ai/mranderson323/skills/delvorn-register

skill-card.md:40

Dependencies and supply chain

Package	Version	Source	Known vuln	Notes
python3	`*`	stdlib	No	仅使用 urllib.parse, urllib.request, json

File composition

4 files · 162 lines

Markdown 2 files · 105 linesPython 1 files · 50 linesShell 1 files · 7 lines

Files of concern · 3

SKILL.md Markdown · 46 lines

https://telegra.ph/Delvorn-register-1-test-public-receipt-08-26 · https://delvorn.site/.well-known/x402 · https://delvorn.site

skill-card.md Markdown · 59 lines

https://clawhub.ai/user/mranderson323 · https://clawhub.ai/mranderson323/skills/delvorn-register

edit_telegraph_promo.py Python · 50 lines

未声明的 Telegraph 编辑脚本 · Python 脚本依赖未声明 · 硬编码凭证路径 · https://api.telegra.ph/getPage/ · https://delvorn.site/ · https://api.telegra.ph/editPage/

Other files · recat.sh

Security positives

skill-card.md 明确提示了 bundled Telegraph editing script 的风险

SKILL.md 清楚说明了 X-API-Key 的敏感性和一次性显示特性

skill-card.md 提供了合理的风险缓解建议（使用可控钱包、1 USDC 限额）

核心功能（x402 支付）行为与文档一致