安全决策报告
precc
Skill installs CLI tool via documented pipe-to-bash pattern and registers a shell hook; all behavior is declared but the install method remains inherently risky.
为什么得出这个结论
1/4 个维度触发 通过
声明与实际能力
声明资源与推断能力基本一致。
阻止
隐藏执行与外联
提取到 1 个高危 IOC 或外联信号。
通过
攻击链与高危发现
没有形成明确的恶意路径。
复核
依赖与供应链卫生
发现 3 项需要关注的依赖或供应链线索。
风险分是怎么被拉高的
Documented pipe-to-bash install +15
curl -fsSL https://peria.ai/install.sh | bash at SKILL.md:101 is documented but still dangerous
PreToolUse hook with command modification +10
Hook can intercept and rewrite Bash commands, declared in docs
最关键的证据
中危 代码执行
Pipe-to-bash install pattern
SKILL.md documents curl -fsSL https://peria.ai/install.sh | bash at line 101. While declared, this pattern is inherently dangerous as it executes arbitrary remote code without inspection.
SKILL.md:101 Download and inspect install.sh before execution: curl -fsSL https://peria.ai/install.sh > install.sh && cat install.sh
中危 文档欺骗
Author mismatch between SKILL.md and skill-card.md
SKILL.md lists author as 'peri-a-i' while skill-card.md shows publisher as 'yijunyu'. This indicates potential copy/republishing without alignment.
SKILL.md, skill-card.md:12 Verify the identity and intent of both parties before trusting this skill.
低危 权限提升
PreToolUse hook intercepts all shell commands
The precc-hook binary registered as a PreToolUse hook can review and potentially rewrite any Bash command before execution. Declared but powerful.
SKILL.md:59 Audit the precc-hook binary behavior and understand how commands are modified before relying on this skill.
声明能力 vs 实际能力
文件系统 通过
声明 WRITE
→ 推断 WRITE
SKILL.md lines 59-64: writes to ~/.local/bin/, ~/.local/share/precc/ 命令执行 通过
声明 WRITE
→ 推断 WRITE
SKILL.md line 101: curl -fsSL install.sh | bash 环境变量 通过
声明 READ
→ 推断 READ
SKILL.md: PRECC_LICENSE_KEY env var 网络访问 通过
声明 READ
→ 推断 READ
Downloads binaries from GitHub releases, declared 技能调用 通过
声明 READ
→ 推断 READ
PreToolUse hook registered in ~/.claude/settings.json 可疑产物与外联
严重 危险命令
curl -fsSL https://peria.ai/install.sh | bash SKILL.md:101
中危 外部 URL
https://peria.ai/install.sh SKILL.md:101
中危 外部 URL
https://clawhub.ai/skills/precc SKILL.md:179
中危 外部 URL
https://clawhub.ai/user/yijunyu skill-card.md:7
中危 外部 URL
https://clawhub.ai/yijunyu/skills/precc skill-card.md:29
依赖与供应链
| 包名 | 版本 | 来源 | 漏洞 | 备注 |
|---|---|---|---|---|
| precc | * | binary | 否 | Rust binary downloaded from GitHub releases; SHA256 verified |
| precc-hook | * | binary | 否 | Hook binary; PreToolUse registered in Claude Code settings |
| cocoindex-code | * | pip (optional) | 否 | Optional semantic search; pipx install recommended |
文件构成
3 个文件 · 233 行
Markdown 2 个文件 · 228 行JSON 1 个文件 · 5 行
需关注文件 · 2
SKILL.md Pipe-to-bash install pattern · PreToolUse hook intercepts all shell commands · curl -fsSL https://peria.ai/install.sh | bash · https://peria.ai/install.sh · https://clawhub.ai/skills/precc
skill-card.md https://clawhub.ai/user/yijunyu · https://clawhub.ai/yijunyu/skills/precc
其他文件 · _meta.json
安全亮点
SHA256 checksum verification is mentioned for downloaded binaries
All filesystem writes are explicitly documented (~/.local/bin, ~/.local/share/precc)
Telemetry is opt-in, disabled by default, and uses SQLCipher encryption
No base64-encoded payloads or obfuscated code in documentation
No credential harvesting or environment variable exfiltration observed
GitHub releases provide a verifiable source for binaries