中文 EN
Start Review
Skill Trust Decision

a2a-article-services

文档声称HTTPS+SM4加密但代码使用HTTP明文传输，存在文档欺骗；硬编码IP地址增加中间人攻击风险；未声明文件系统WRITE权限用于订单存储。

Install decision first Source: ClawHub Scanned: Jun 24, 2026
Files 7
Artifacts 7
Violations 1
Findings 4
Most direct threat evidence
01
读取SKILL.md伪装成合法A2A文章服务技能 Entry · SKILL.md
02
硬编码IP 43.136.97.223进行HTTP明文通信 Escalation · scripts/create_order.py
03
中间人攻击可截获credential和question等敏感数据 Impact · scripts/service.py

Why this conclusion was reached

3/4 dimensions flagged
Block
Declared vs actual capability

1 undeclared or violating capabilities were inferred.

Block
Hidden execution and egress

1 high-risk artifacts or egress signals were extracted.

Block
Attack chain and severe findings

The report includes 3 attack-chain steps and 0 severe findings.

Review
Dependencies and supply chain hygiene

Dependency information is incomplete, so supply-chain confidence stays limited.

Attack Chain

01
读取SKILL.md伪装成合法A2A文章服务技能

Entry · SKILL.md:1

02
硬编码IP 43.136.97.223进行HTTP明文通信

Escalation · scripts/create_order.py:26

03
中间人攻击可截获credential和question等敏感数据

Impact · scripts/service.py:80

What drove the risk score up

文档欺骗 +20

README.md声称HTTPS+SM4加密但代码使用HTTP明文POST

硬编码IP地址 +15

IP 43.136.97.223 硬编码在代码中，无域名解析，易受中间人攻击

权限越权 +10

SKILL.md声明filesystem:NONE但代码写入~/.openclaw/skills/orders/目录

Most important evidence

Medium Doc Mismatch

文档声称加密但代码未实现

README.md第100行声称'HTTPS + SM4 国密加密'，但create_order.py和service.py中实际使用urllib.request.Request进行HTTP明文POST传输，无任何加密实现。

scripts/create_order.py:50
实现SM4加密或更新文档移除加密声明，使用HTTPS替代HTTP
Medium Supply Chain

硬编码IP地址增加攻击面

API_BASE硬编码为http://43.136.97.223而非域名，IP可被DNS污染或中间人劫持，且后端更换IP会导致服务中断。

scripts/create_order.py:26
使用域名替代硬编码IP，配置HTTPS确保传输安全
Medium Priv Escalation

未声明的文件系统WRITE权限

SKILL.md元数据声明permissions为空或仅network.outbound，但file_utils.py会将订单数据写入~/.openclaw/skills/orders/{indicator}/{order_no}.json，涉及目录创建和文件写入。

shared/file_utils.py:25
在SKILL.md中声明filesystem:WRITE权限用于订单持久化存储
Low Sensitive Access

写入用户home目录

订单文件存储在用户home目录下的.openclaw路径，涉及文件系统敏感区域访问。

shared/file_utils.py:14
考虑使用技能专用目录或提供配置选项

Declared capability vs actual capability

Network Pass
Declared WRITE
→
Inferred WRITE
scripts/create_order.py:50-56, scripts/service.py:80-86
Filesystem Block
Declared NONE
→
Inferred WRITE
shared/file_utils.py:25-27 (os.makedirs + json.dump)

Suspicious artifacts and egress

High IP Address
43.136.97.223

README.md:100

Medium External URL
https://clawtip.jd.com

README.md:3

Medium External URL
http://43.136.97.223/clawtip-api/

README.md:123

Medium External URL
http://43.136.97.223/clawtip-api/api/createOrder

scripts/create_order.py:26

Medium External URL
http://43.136.97.223/clawtip-api/api/getServiceResult

scripts/service.py:23

Medium External URL
https://clawhub.ai/user/lucianaib0318

skill-card.md:7

Medium External URL
https://clawhub.ai/lucianaib0318/a2a-article-services

skill-card.md:29

Dependencies and supply chain

There are no structured dependency warnings.

File composition

7 files · 622 lines
Markdown 3 files · 325 linesPython 3 files · 292 linesJSON 1 files · 5 lines
Files of concern · 5
README.md Markdown · 214 lines
43.136.97.223 · https://clawtip.jd.com · http://43.136.97.223/clawtip-api/
scripts/create_order.py Python · 127 lines
文档声称加密但代码未实现 · 硬编码IP地址增加攻击面 · http://43.136.97.223/clawtip-api/api/createOrder
scripts/service.py Python · 124 lines
http://43.136.97.223/clawtip-api/api/getServiceResult
skill-card.md Markdown · 43 lines
https://clawhub.ai/user/lucianaib0318 · https://clawhub.ai/lucianaib0318/a2a-article-services
shared/file_utils.py Python · 41 lines
未声明的文件系统WRITE权限 · 写入用户home目录
Other files · SKILL.md · _meta.json

Security positives

代码结构清晰，模块职责分明
无明显的凭证收割或数据外泄行为
无远程代码执行或shell命令注入风险
无base64编码或代码混淆
使用标准库urllib而非subprocess执行命令