中文 EN
Start Review
Skill Trust Decision

smyx-child-happy-moment-capture-analysis

儿童开心时刻识别技能功能正常，存在轻微文档-实现不一致（网络请求未声明），subprocess代码被注释但未删除存在潜在风险，无凭证收割或恶意行为证据。

Install decision first Source: ClawHub Scanned: Aug 16, 2026
Files 29
Artifacts 10
Violations 3
Findings 4

Why this conclusion was reached

1/4 dimensions flagged
Block
Declared vs actual capability

3 undeclared or violating capabilities were inferred.

Review
Hidden execution and egress

10 lower-risk artifacts were extracted and still need context.

Pass
Attack chain and severe findings

There is no explicit malicious chain in the report.

Pass
Dependencies and supply chain hygiene

Dependencies are present but no obvious high-risk issue stands out.

What drove the risk score up

subprocess代码存在但被注释 +12

skills/smyx_common/scripts/skill.py:62-75 ai_chat方法构建subprocess命令但实际未调用，代码未删除存在恢复风险

网络请求未在文档声明 +8

SKILL.md未声明通过requests调用远程API，allowed-tools映射中无对应声明

本地数据库未声明 +2

使用SQLite存储用户凭证(token/open_token)，SKILL.md未提及

Most important evidence

Medium Doc Mismatch

注释的subprocess代码存在恢复风险

skills/smyx_common/scripts/skill.py中的ai_chat方法构建了subprocess命令数组(cmd=['openclaw','agent'...])，虽然实际未执行(subprocess.run被注释)，但代码仍然存在。如被激活可执行任意shell命令。

skills/smyx_common/scripts/skill.py:62-75
删除注释的subprocess代码，或明确在SKILL.md中声明openclaw agent调用能力
Low Doc Mismatch

网络请求能力未声明

代码通过requests库调用远程API服务进行视频分析，但SKILL.md的allowed-tools映射中未声明network:WRITE权限。

skills/smyx_common/scripts/util.py:305
在SKILL.md的Resources部分声明网络请求能力
Low Sensitive Access

环境变量读取未声明

config.py从环境变量读取用户身份(OPENCLAW_SENDER_OPEN_ID, OPENCLAW_SENDER_USERNAME, FEISHU_OPEN_ID)，SKILL.md未提及。

skills/smyx_common/scripts/config.py:97-104
在SKILL.md中声明读取的特定环境变量及其用途
Info Doc Mismatch

本地SQLite数据库未声明

使用SQLite数据库存储用户凭证(token/open_token)和会话信息，存储在工作区data目录，SKILL.md未提及持久化存储。

skills/smyx_common/scripts/dao.py:67
在SKILL.md数据处理部分声明本地缓存策略

Declared capability vs actual capability

Filesystem Pass
Declared READ
→
Inferred READ
SKILL.md:input参数+scripts/smyx_child_happy_moment_capture_analysis.py:87 open()
Network Block
Declared NONE
→
Inferred WRITE
skills/smyx_common/scripts/util.py:305 requests.request()调用远程API
Environment Block
Declared NONE
→
Inferred READ
skills/smyx_common/scripts/config.py:97 读取OPENCLAW_SENDER_OPEN_ID等环境变量
Shell Pass
Declared NONE
→
Inferred NONE
skills/smyx_common/scripts/skill.py:62-75 注释的subprocess代码
Database Block
Declared NONE
→
Inferred WRITE
skills/smyx_common/scripts/dao.py:67 create_engine创建SQLite

Suspicious artifacts and egress

Medium External URL
https://lifeemergence.com/sample.html

SKILL.md:34

Medium External URL
http://192.168.1.234:9601/smyx-open-api

skills/smyx_common/scripts/config-dev.yaml:2

Medium External URL
http://192.168.1.234:4100

skills/smyx_common/scripts/config-dev.yaml:3

Medium External URL
http://192.168.1.234:7070/jeecg-boot-xzgz

skills/smyx_common/scripts/config-dev.yaml:4

Medium External URL
https://livemonitortest.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config-test.yaml:2

Medium External URL
http://livemonitortest.lifeemergence.com

skills/smyx_common/scripts/config-test.yaml:3

Medium External URL
https://healthtest.lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config-test.yaml:4

Medium External URL
https://lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config.yaml:4

Medium External URL
https://open.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config.yaml:5

Medium External URL
http://livemonitor.lifeemergence.com

skills/smyx_common/scripts/config.yaml:6

Dependencies and supply chain

PackageVersionSourceKnown vulnNotes
pydash 8.0.6 pip No 版本已锁定
SQLAlchemy 2.0.46 pip No 版本已锁定
PyYAML 6.0.3 pip No 版本已锁定

File composition

29 files · 2704 lines
Python 18 files · 2363 linesMarkdown 3 files · 306 linesYAML 6 files · 29 linesText 2 files · 6 lines
Files of concern · 5
skills/smyx_common/scripts/util.py Python · 718 lines
网络请求能力未声明
skills/smyx_common/scripts/config.py Python · 399 lines
环境变量读取未声明
skills/smyx_common/scripts/dao.py Python · 499 lines
本地SQLite数据库未声明
SKILL.md Markdown · 194 lines
https://lifeemergence.com/sample.html
skills/smyx_common/scripts/skill.py Python · 85 lines
注释的subprocess代码存在恢复风险
Other files · skill.py · api_doc.md · smyx_analysis.py · smyx_child_happy_moment_capture_analysis.py · api_service.py · api_service.py +1

Security positives

依赖包版本已锁定(pydash==8.0.6, SQLAlchemy==2.0.46, PyYAML==6.0.3)
无凭证收割行为，UserDao仅在本地SQLite存储不外传
网络请求使用标准HTTPS，API地址由配置管理非硬编码
无base64编码执行或命令注入风险
argparse参数解析安全，无shell=True使用
数据库路径强制重定向到工作区data目录防止目录遍历