Skill Trust Decision
GitToQuark
Skill references external scripts (scripts/quark-drive.cjs, scripts/install.sh) that are not included in the package, yet the skill declares shell execution, credential persistence to ~/.quarkclouddrive/, and dynamic binary downloads from unversioned GitHub releases and an encoded fallback URL.
Most direct threat evidence
Critical Supply Chain
Referenced scripts not included in package SKILL.md line 13-18 explicitly requires scripts/quark-drive.cjs and scripts/install.sh with detailed behavior descriptions, but the scripts/ directory is absent from the package. This is a doc-to-implementation mismatch — the skill cannot function without these files.
SKILL.md:13 Why this conclusion was reached
1/4 dimensions flagged Pass
Declared vs actual capability
Declared resources and inferred behavior are broadly aligned.
Review
Hidden execution and egress
11 lower-risk artifacts were extracted and still need context.
Block
Attack chain and severe findings
The report includes 4 attack-chain steps and 3 severe findings.
Review
Dependencies and supply chain hygiene
1 dependency or supply-chain issues need attention.
Attack Chain
01
Skill packaged and published with missing scripts/ directory
Entry · package
02
Agent downloads 'latest' Quark CLI from GitHub releases — tag is mutable
Escalation · SKILL.md:46
03
Agent downloads Quark CLI from hardcoded fallback URL with encoded ID
Escalation · SKILL.md:59
04
Trojanized binary executed with shell:WRITE + filesystem:WRITE permissions, persists credentials to ~/.quarkclouddrive/
Impact · SKILL.md:61
What drove the risk score up
Missing scripts directory +20
SKILL.md declares bash scripts/install.sh and node scripts/quark-drive.cjs but scripts/ is absent from package
Unversioned dynamic downloads +18
Fetches latest release of Quark CLI without version pinning; latest tag can be altered
Hardcoded fallback with encoded ID +15
pdds.quark.cn fallback URL contains base64-like identifier bbhhdeegcbcfbdjdp that could be swapped to a malicious binary
Credential persistence declared +10
Skill explicitly stores credentials to ~/.quarkclouddrive/ which persists across sessions
Dynamic binary invocation +5
Downloads and executes Node.js binary from untrusted external source without integrity verification
Most important evidence
Critical Supply Chain
Referenced scripts not included in package
SKILL.md line 13-18 explicitly requires scripts/quark-drive.cjs and scripts/install.sh with detailed behavior descriptions, but the scripts/ directory is absent from the package. This is a doc-to-implementation mismatch — the skill cannot function without these files.
SKILL.md:13 Include the actual scripts in the package or remove the references. Do not download from external URLs at runtime.
High Supply Chain
Unversioned Quark CLI download
SKILL.md line 46-56 fetches the latest release tag via GitHub API and downloads the binary without pinning to a version hash. The 'latest' tag is mutable — an attacker who compromises the quarkclouddrive_offical repo could point latest to a malicious binary.
SKILL.md:46 Pin to a specific release tag (e.g., v1.0.15) and verify the binary via SHA256 hash provided in SKILL.md.
High Supply Chain
Hardcoded fallback URL with encoded identifier
SKILL.md line 59 contains a fallback download URL to pdds.quark.cn with an encoded-looking identifier 'bbhhdeegcbcfbdjdp'. This is a static URL pointing to version 1.0.15 but could be replaced with a malicious binary at any time without the skill detecting the change.
SKILL.md:59 Verify the binary hash after download. Consider removing the fallback or hosting it on a controlled domain with integrity checks.
Medium Priv Escalation
Persistent credential storage declared
SKILL.md line 71 explicitly states 'Credentials persist to ~/.quarkclouddrive/'. This is declared but creates a credential persistence mechanism that survives the session and could be harvested by subsequent malicious skills running in the same environment.
SKILL.md:71 Use ephemeral/temporary credential storage. If persistence is required, encrypt credentials at rest and document the risk.
Medium Supply Chain
No integrity verification for downloaded binary
The skill downloads a Node.js binary from GitHub releases and executes it but does not verify the binary's checksum or signature. An attacker who compromises the release or the fallback URL could serve a trojanized binary.
SKILL.md:46 Add SHA256 hash verification for all downloaded binaries before execution.
Low Doc Mismatch
Skill-card.md acknowledges suspicious security summary
skill-card.md 'Known Risks' section explicitly states 'The security summary rates the release suspicious because installation and runtime behavior rely on missing wrapper scripts'. This admission confirms the package is incomplete/inoperable as delivered.
skill-card.md:20 This self-acknowledgment does not mitigate the risk. Fix the package or withdraw it.
Declared capability vs actual capability
Network Pass
Declared READ
→ Inferred READ
SKILL.md:27 curl https://ipinfo.io/json Shell Pass
Declared WRITE
→ Inferred WRITE
SKILL.md:55 bash scripts/install.sh; SKILL.md:61 node scripts/quark-drive.cjs Filesystem Pass
Declared WRITE
→ Inferred WRITE
SKILL.md:73 curl -L -o download; ~/.quarkclouddrive/ credential persistence Environment Pass
Declared READ
→ Inferred READ
SKILL.md:145 OPENCLAW_SERVICE_MARKER injection Suspicious artifacts and egress
Medium External URL
https://skills.sh/b/GitToQuark/GitToQuark README.md:3
Medium External URL
https://skills.sh/GitToQuark/GitToQuark README.md:3
Medium External URL
https://img.shields.io/badge/%E4%B8%AD%E6%96%87-%E6%96%87%E6%A1%A3-green README.md:7
Medium External URL
https://img.shields.io/badge/English-English-blue README.zh-CN.md:7
Medium External URL
https://ipinfo.io/json SKILL.md:27
Medium External URL
https://gh-proxy.com/ SKILL.md:31
Medium External URL
https://ghproxy.net/ SKILL.md:31
Medium External URL
https://v6.gh-proxy.org/ SKILL.md:31
Medium External URL
https://pdds.quark.cn/download/stfile/bbhhdeegcbcfbdjdp/quarkclouddrive-1.0.15.zip SKILL.md:59
Medium External URL
https://clawhub.ai/user/violet27chen skill-card.md:9
Medium External URL
https://clawhub.ai/violet27chen/skills/git-to-quark skill-card.md:36
Dependencies and supply chain
| Package | Version | Source | Known vuln | Notes |
|---|---|---|---|---|
| quarkclouddrive_offical | latest (unpinned) | github_releases | No | No version pinning, fetches 'latest' tag which is mutable. No integrity verification. |
File composition
7 files · 282 lines
Markdown 4 files · 277 linesJSON 1 files · 5 lines
Files of concern · 4
SKILL.md Referenced scripts not included in package · Unversioned Quark CLI download · Hardcoded fallback URL with encoded identifier · Persistent credential storage declared · No integrity verification for downloaded binary · https://ipinfo.io/json · https://gh-proxy.com/ · https://ghproxy.net/ · https://v6.gh-proxy.org/ · https://pdds.quark.cn/download/stfile/bbhhdeegcbcfbdjdp/quarkclouddrive-1.0.15.zip
skill-card.md Skill-card.md acknowledges suspicious security summary · https://clawhub.ai/user/violet27chen · https://clawhub.ai/violet27chen/skills/git-to-quark
README.md https://skills.sh/b/GitToQuark/GitToQuark · https://skills.sh/GitToQuark/GitToQuark · https://img.shields.io/badge/%E4%B8%AD%E6%96%87-%E6%96%87%E6%A1%A3-green
README.zh-CN.md https://img.shields.io/badge/English-English-blue
Other files · chinese.png · english.png · _meta.json
Security positives
Skill declares its network calls explicitly (ipinfo.io, GitHub API, proxy nodes)
Credential handling guidance present: 'Agent MUST NOT read, print, or cache plaintext tokens/cookies'
MIT-0 license allows broad use
No obfuscation or base64-encoded payloads detected
No direct credential harvesting from environment variables