中文 EN
开始可信审查
安全决策报告

GitToQuark

Skill references external scripts (scripts/quark-drive.cjs, scripts/install.sh) that are not included in the package, yet the skill declares shell execution, credential persistence to ~/.quarkclouddrive/, and dynamic binary downloads from unversioned GitHub releases and an encoded fallback URL.

安装决策优先 来源: ClawHub 扫描时间: 4 天前
文件 7
IOC 11
越权项 0
发现 6
最直接的威胁证据
严重 供应链
Referenced scripts not included in package

SKILL.md line 13-18 explicitly requires scripts/quark-drive.cjs and scripts/install.sh with detailed behavior descriptions, but the scripts/ directory is absent from the package. This is a doc-to-implementation mismatch — the skill cannot function without these files.

SKILL.md:13

为什么得出这个结论

1/4 个维度触发
通过
声明与实际能力

声明资源与推断能力基本一致。

复核
隐藏执行与外联

提取到 11 个一般风险产物，需要结合上下文判断。

阻止
攻击链与高危发现

报告包含 4 步攻击链，另有 3 项高危或严重发现。

复核
依赖与供应链卫生

发现 1 项需要关注的依赖或供应链线索。

攻击链

01
Skill packaged and published with missing scripts/ directory

初始入口 · package

02
Agent downloads 'latest' Quark CLI from GitHub releases — tag is mutable

权限提升 · SKILL.md:46

03
Agent downloads Quark CLI from hardcoded fallback URL with encoded ID

权限提升 · SKILL.md:59

04
Trojanized binary executed with shell:WRITE + filesystem:WRITE permissions, persists credentials to ~/.quarkclouddrive/

最终危害 · SKILL.md:61

风险分是怎么被拉高的

Missing scripts directory +20

SKILL.md declares bash scripts/install.sh and node scripts/quark-drive.cjs but scripts/ is absent from package

Unversioned dynamic downloads +18

Fetches latest release of Quark CLI without version pinning; latest tag can be altered

Hardcoded fallback with encoded ID +15

pdds.quark.cn fallback URL contains base64-like identifier bbhhdeegcbcfbdjdp that could be swapped to a malicious binary

Credential persistence declared +10

Skill explicitly stores credentials to ~/.quarkclouddrive/ which persists across sessions

Dynamic binary invocation +5

Downloads and executes Node.js binary from untrusted external source without integrity verification

最关键的证据

严重 供应链

Referenced scripts not included in package

SKILL.md line 13-18 explicitly requires scripts/quark-drive.cjs and scripts/install.sh with detailed behavior descriptions, but the scripts/ directory is absent from the package. This is a doc-to-implementation mismatch — the skill cannot function without these files.

SKILL.md:13
Include the actual scripts in the package or remove the references. Do not download from external URLs at runtime.
高危 供应链

Unversioned Quark CLI download

SKILL.md line 46-56 fetches the latest release tag via GitHub API and downloads the binary without pinning to a version hash. The 'latest' tag is mutable — an attacker who compromises the quarkclouddrive_offical repo could point latest to a malicious binary.

SKILL.md:46
Pin to a specific release tag (e.g., v1.0.15) and verify the binary via SHA256 hash provided in SKILL.md.
高危 供应链

Hardcoded fallback URL with encoded identifier

SKILL.md line 59 contains a fallback download URL to pdds.quark.cn with an encoded-looking identifier 'bbhhdeegcbcfbdjdp'. This is a static URL pointing to version 1.0.15 but could be replaced with a malicious binary at any time without the skill detecting the change.

SKILL.md:59
Verify the binary hash after download. Consider removing the fallback or hosting it on a controlled domain with integrity checks.
中危 权限提升

Persistent credential storage declared

SKILL.md line 71 explicitly states 'Credentials persist to ~/.quarkclouddrive/'. This is declared but creates a credential persistence mechanism that survives the session and could be harvested by subsequent malicious skills running in the same environment.

SKILL.md:71
Use ephemeral/temporary credential storage. If persistence is required, encrypt credentials at rest and document the risk.
中危 供应链

No integrity verification for downloaded binary

The skill downloads a Node.js binary from GitHub releases and executes it but does not verify the binary's checksum or signature. An attacker who compromises the release or the fallback URL could serve a trojanized binary.

SKILL.md:46
Add SHA256 hash verification for all downloaded binaries before execution.
低危 文档欺骗

Skill-card.md acknowledges suspicious security summary

skill-card.md 'Known Risks' section explicitly states 'The security summary rates the release suspicious because installation and runtime behavior rely on missing wrapper scripts'. This admission confirms the package is incomplete/inoperable as delivered.

skill-card.md:20
This self-acknowledgment does not mitigate the risk. Fix the package or withdraw it.

声明能力 vs 实际能力

网络访问 通过
声明 READ
→
推断 READ
SKILL.md:27 curl https://ipinfo.io/json
命令执行 通过
声明 WRITE
→
推断 WRITE
SKILL.md:55 bash scripts/install.sh; SKILL.md:61 node scripts/quark-drive.cjs
文件系统 通过
声明 WRITE
→
推断 WRITE
SKILL.md:73 curl -L -o download; ~/.quarkclouddrive/ credential persistence
环境变量 通过
声明 READ
→
推断 READ
SKILL.md:145 OPENCLAW_SERVICE_MARKER injection

可疑产物与外联

中危 外部 URL
https://skills.sh/b/GitToQuark/GitToQuark

README.md:3

中危 外部 URL
https://skills.sh/GitToQuark/GitToQuark

README.md:3

中危 外部 URL
https://img.shields.io/badge/%E4%B8%AD%E6%96%87-%E6%96%87%E6%A1%A3-green

README.md:7

中危 外部 URL
https://img.shields.io/badge/English-English-blue

README.zh-CN.md:7

中危 外部 URL
https://ipinfo.io/json

SKILL.md:27

中危 外部 URL
https://gh-proxy.com/

SKILL.md:31

中危 外部 URL
https://ghproxy.net/

SKILL.md:31

中危 外部 URL
https://v6.gh-proxy.org/

SKILL.md:31

中危 外部 URL
https://pdds.quark.cn/download/stfile/bbhhdeegcbcfbdjdp/quarkclouddrive-1.0.15.zip

SKILL.md:59

中危 外部 URL
https://clawhub.ai/user/violet27chen

skill-card.md:9

中危 外部 URL
https://clawhub.ai/violet27chen/skills/git-to-quark

skill-card.md:36

依赖与供应链

包名版本来源漏洞备注
quarkclouddrive_offical latest (unpinned) github_releases 否 No version pinning, fetches 'latest' tag which is mutable. No integrity verification.

文件构成

7 个文件 · 282 行
Markdown 4 个文件 · 277 行JSON 1 个文件 · 5 行
需关注文件 · 4
SKILL.md Markdown · 150 行
Referenced scripts not included in package · Unversioned Quark CLI download · Hardcoded fallback URL with encoded identifier · Persistent credential storage declared · No integrity verification for downloaded binary · https://ipinfo.io/json · https://gh-proxy.com/ · https://ghproxy.net/ · https://v6.gh-proxy.org/ · https://pdds.quark.cn/download/stfile/bbhhdeegcbcfbdjdp/quarkclouddrive-1.0.15.zip
skill-card.md Markdown · 54 行
Skill-card.md acknowledges suspicious security summary · https://clawhub.ai/user/violet27chen · https://clawhub.ai/violet27chen/skills/git-to-quark
README.md Markdown · 37 行
https://skills.sh/b/GitToQuark/GitToQuark · https://skills.sh/GitToQuark/GitToQuark · https://img.shields.io/badge/%E4%B8%AD%E6%96%87-%E6%96%87%E6%A1%A3-green
README.zh-CN.md Markdown · 36 行
https://img.shields.io/badge/English-English-blue
其他文件 · chinese.png · english.png · _meta.json

安全亮点

Skill declares its network calls explicitly (ipinfo.io, GitHub API, proxy nodes)
Credential handling guidance present: 'Agent MUST NOT read, print, or cache plaintext tokens/cookies'
MIT-0 license allows broad use
No obfuscation or base64-encoded payloads detected
No direct credential harvesting from environment variables