安全决策报告
dlazy-webtoon-adapter
Skill is a legitimate webtoon-adaptation tool but declares no capabilities while the skill card mentions shell command output and the skill instructs agents to execute external CLI commands — capability declaration gap warrants caution.
最直接的威胁证据
为什么得出这个结论
1/4 个维度触发 阻止
声明与实际能力
发现 4 项声明之外的能力或越权行为。
复核
隐藏执行与外联
提取到 5 个一般风险产物，需要结合上下文判断。
通过
攻击链与高危发现
没有形成明确的恶意路径。
复核
依赖与供应链卫生
发现 1 项需要关注的依赖或供应链线索。
风险分是怎么被拉高的
Undeclared shell execution +20
SKILL.md instructs the agent to execute terminal commands (dlazy seedream-4.5) but declares no shell:WRITE capability
Undeclared network access +15
Skill communicates with api.dlazy.com and files.dlazy.com but does not declare network:READ in SKILL.md
Undeclared credential storage +10
Saves dLazy API key to ~/.dlazy/config.json without declaring filesystem:WRITE
Version inconsistency +5
SKILL.md frontmatter says 1.3.5, _meta.json says 1.3.25, install command says @1.2.3 and @1.0.5 — no consistent pinning
最关键的证据
中危 文档欺骗
Shell execution capability not declared in SKILL.md
The skill instructs agents to execute terminal commands (dlazy seedream-4.5) and skill-card.md lists 'Shell commands' as an output type, but SKILL.md declares no shell:WRITE capability. This is a doc-to-code mismatch.
SKILL.md:199 Add 'shell:WRITE' to the declared allowed-tools in SKILL.md frontmatter or metadata
中危 文档欺骗
Network access not declared in SKILL.md
The skill metadata lists api.dlazy.com and files.dlazy.com as API endpoints and the skill uploads media files to cloud storage, but no network:READ or network:WRITE is declared in SKILL.md.
SKILL.md:17 Add 'network:READ' (and network:WRITE for uploads) to declared capabilities in SKILL.md
中危 权限提升
Credential persistence to local filesystem not declared
The skill instructs users to run 'dlazy login' or 'dlazy auth set' which writes API credentials to ~/.dlazy/config.json. This filesystem WRITE is not declared in SKILL.md.
SKILL.md:36 Declare filesystem:WRITE in allowed-tools for credential storage path
低危 供应链
Inconsistent and unpinned @dlazy/cli version across metadata
SKILL.md frontmatter says @1.2.3, webtoon-adapter metadata says @1.0.5, SKILL-cn.md body text says @1.2.3, skill-card.md says install field. No consistent version pinning across all fields increases supply-chain risk.
SKILL.md:6 Pin to a single consistent version across all metadata fields
声明能力 vs 实际能力
网络访问 阻止
声明 NONE
→ 推断 READ
SKILL.md metadata: apiEndpoints: ["api.dlazy.com","files.dlazy.com"] 命令执行 阻止
声明 NONE
→ 推断 WRITE
SKILL.md execution section: 'dlazy seedream-4.5 --prompt "..."', skill-card.md: Output Type(s): Shell commands 文件系统 阻止
声明 NONE
→ 推断 WRITE
SKILL.md auth section: 'CLI 会把 key 保存在 ~/.dlazy/config.json' 环境变量 阻止
声明 NONE
→ 推断 READ
SKILL.md: 'DLAZY_API_KEY environment variable' — implies reading env vars 可疑产物与外联
中危 外部 URL
https://www.npmjs.com/package/@dlazy/cli SKILL-cn.md:7
中危 外部 URL
https://dlazy.com SKILL-cn.md:32
中危 外部 URL
https://dlazy.com/dashboard/organization/api-key SKILL-cn.md:33
中危 外部 URL
https://clawhub.ai/user/dlazyai skill-card.md:9
中危 外部 URL
https://clawhub.ai/dlazyai/skills/dlazy-webtoon-adapter skill-card.md:39
依赖与供应链
| 包名 | 版本 | 来源 | 漏洞 | 备注 |
|---|---|---|---|---|
| @dlazy/cli | * | npm | 否 | Versions vary across metadata fields (1.0.5, 1.2.3) — not consistently pinned |
文件构成
4 个文件 · 484 行
Markdown 3 个文件 · 479 行JSON 1 个文件 · 5 行
需关注文件 · 3
SKILL-cn.md https://www.npmjs.com/package/@dlazy/cli · https://dlazy.com · https://dlazy.com/dashboard/organization/api-key
SKILL.md Shell execution capability not declared in SKILL.md · Network access not declared in SKILL.md · Credential persistence to local filesystem not declared · Inconsistent and unpinned @dlazy/cli version across metadata
skill-card.md https://clawhub.ai/user/dlazyai · https://clawhub.ai/dlazyai/skills/dlazy-webtoon-adapter
其他文件 · _meta.json
安全亮点
No malicious code (base64, eval, reverse shell) found — this is a documentation-only skill with no executable scripts
External CLI source code is publicly referenced (github.com/dlazy-ai/cli)
API key can be passed via DLAZY_API_KEY env var instead of being persisted locally
Skill-card.md correctly lists known risks and mitigations for external CLI and credential storage
skill-card.md explicitly recommends reviewing the npm package before installation