安全决策报告
dating
The Dating skill is a legitimate dating preparation tool with documented browser automation and external MCP service dependency, but raises ethical concerns about systematic profiling of individuals without their consent.
为什么得出这个结论
0/4 个维度触发 通过
声明与实际能力
声明资源与推断能力基本一致。
复核
隐藏执行与外联
提取到 22 个一般风险产物，需要结合上下文判断。
通过
攻击链与高危发现
没有形成明确的恶意路径。
通过
依赖与供应链卫生
依赖结构存在，但暂未看到明显高危告警。
风险分是怎么被拉高的
External MCP endpoint communication +10
ManoBrowser MCP connects to datasaver.deepminingai.com for browser automation - documented but involves external data flow
Remote dependency download +8
git clone https://github.com/ClawCap/ManoBrowser - downloads code from external repo at runtime
Deep behavioral profiling +7
Systematic collection and analysis of target person's interests, personality, and social patterns without their knowledge
最关键的证据
中危 敏感访问
External MCP service dependency
The skill depends on ManoBrowser MCP plugin which communicates with datasaver.deepminingai.com external endpoint for browser automation. This means browsing data flows to an external service.
scripts/check_manobrowser.sh:26 Verify the privacy policy of deepminingai.com and ensure user consent for external browser data processing
中危 敏感访问
Runtime dependency download from external repo
SKILL.md instructs auto-download of ManoBrowser via git clone from github.com/ClawCap at runtime. While documented, this retrieves executable code from external source.
SKILL.md:98 Consider pinning to a specific commit hash or including dependency in the skill package
低危 文档欺骗
Data collection scope ambiguity
The main SKILL.md specifies collecting target person's public data, but sub-modules (xiaohongshu/douyin/weibo/douban/bilibili) are documented as collecting the logged-in user's data. Dating skill selectively uses only 'public' parts but the sub-module descriptions claim full collection.
xiaohongshu-deep-profile-collect/SKILL.md etc.:1 Clarify in sub-module SKILL.mds that they are designed for the Dating context with limited scope
声明能力 vs 实际能力
浏览器 通过
声明 ADMIN
→ 推断 ADMIN
SKILL.md:depends: manobrowser; All sub-modules use chrome_navigate/chrome_execute_script 网络访问 通过
声明 READ
→ 推断 READ
SKILL.md:98 git clone; scripts/check_manobrowser.sh:26 external API endpoint 文件系统 通过
声明 WRITE
→ 推断 WRITE
SKILL.md:98 git clone to ./manobrowser; clawcap-data/ directory writes 命令执行 通过
声明 NONE
→ 推断 WRITE
scripts/check_manobrowser.sh uses curl for MCP connection testing 可疑产物与外联
中危 外部 URL
https://img.shields.io/badge/License-MIT-blue.svg README.md:25
中危 外部 URL
https://opensource.org/licenses/MIT README.md:25
中危 外部 URL
https://img.shields.io/github/stars/ClawCap/Dating.svg README.md:26
中危 外部 URL
https://www.bilibili.com bilibili-deep-profile-collect/SKILL.md:49
中危 外部 URL
https://api.bilibili.com/x/web-interface/nav bilibili-deep-profile-collect/SKILL.md:65
中危 外部 URL
https://space.bilibili.com/ bilibili-deep-profile-collect/SKILL.md:95
中危 外部 URL
https://api.bilibili.com/x/v3/fav/folder/created/list-all?up_mid= bilibili-deep-profile-collect/SKILL.md:148
中危 外部 URL
https://api.bilibili.com/x/v3/fav/resource/list?media_id= bilibili-deep-profile-collect/SKILL.md:186
中危 外部 URL
https://www.douban.com/mine/ douban-deep-profile-collect/SKILL.md:47
中危 外部 URL
https://movie.douban.com/people/ douban-deep-profile-collect/SKILL.md:90
中危 外部 URL
https://book.douban.com/people/ douban-deep-profile-collect/SKILL.md:223
中危 外部 URL
https://www.douban.com/people/ douban-deep-profile-collect/SKILL.md:357
依赖与供应链
| 包名 | 版本 | 来源 | 漏洞 | 备注 |
|---|---|---|---|---|
| manobrowser | latest | github.com/ClawCap/ManoBrowser | 否 | Auto-downloaded at runtime via git clone; MCP connects to datasaver.deepminingai.com |
文件构成
11 个文件 · 2776 行
Markdown 9 个文件 · 2717 行Shell 1 个文件 · 54 行JSON 1 个文件 · 5 行
需关注文件 · 9
douban-deep-profile-collect/SKILL.md https://www.douban.com/mine/ · https://movie.douban.com/people/ · https://book.douban.com/people/ · https://www.douban.com/people/
xiaohongshu-deep-profile-collect/SKILL.md https://www.xiaohongshu.com/ · https://www.xiaohongshu.com
SKILL.md Runtime dependency download from external repo
douyin-deep-profile-collect/SKILL.md https://www.douyin.com/user/self
bilibili-deep-profile-collect/SKILL.md https://www.bilibili.com · https://api.bilibili.com/x/web-interface/nav · https://space.bilibili.com/ · https://api.bilibili.com/x/v3/fav/folder/created/list-all?up_mid= · https://api.bilibili.com/x/v3/fav/resource/list?media_id=
weibo-deep-profile-collect/SKILL.md https://weibo.com/ · https://weibo.com/u/ · https://weibo.com/u/page/follow/ · https://weibo.com/u/page/fav/
README.md https://img.shields.io/badge/License-MIT-blue.svg · https://opensource.org/licenses/MIT · https://img.shields.io/github/stars/ClawCap/Dating.svg
skill-card.md https://clawhub.ai/user/sophie-xin9 · https://clawhub.ai/sophie-xin9/dating-prep
scripts/check_manobrowser.sh External MCP service dependency · https://datasaver.deepminingai.com/api/v2/
其他文件 · xiaokai_date_report.md · _meta.json
安全亮点
All behaviors are documented in SKILL.md - no hidden functionality
No credential harvesting or API key exfiltration detected
No base64/encoded obfuscation or anti-analysis patterns
No sensitive path access (~/.ssh, ~/.aws, .env)
No reverse shell, C2, or data theft behavior
Public data only collection policy is stated and followed
Data stored locally in clawcap-data/ directory, not uploaded externally
Ethics disclaimer present in generated reports