中文 EN
Start Review
Skill Trust Decision

xhs-fav-export

wc3-code.mjs 是高度混淆的未声明 LLM 调用工具，与 SKILL.md 声称的「纯确定性代码」不符，存在阴影功能嫌疑

Install decision first Source: ClawHub Scanned: 20 days ago
Files 6
Artifacts 6
Violations 0
Findings 2

Why this conclusion was reached

0/4 dimensions flagged
Pass
Declared vs actual capability

Declared resources and inferred behavior are broadly aligned.

Review
Hidden execution and egress

6 lower-risk artifacts were extracted and still need context.

Pass
Attack chain and severe findings

There is no explicit malicious chain in the report.

Review
Dependencies and supply chain hygiene

Dependency information is incomplete, so supply-chain confidence stays limited.

What drove the risk score up

代码混淆未声明 +20

wc3-code.mjs 完全未在 SKILL.md 中提及，且代码经过高度混淆（7804行压缩为1行）

声明-行为差异 +15

SKILL.md 声称「全程确定性代码」「不调用 LLM 子会话」，但存在独立 LLM 调用工具

Most important evidence

Medium Obfuscation

wc3-code.mjs 高度代码混淆且未声明

wc3-code.mjs 是一个独立的 Node.js 工具文件，包含 Base64 解码器混淆逻辑和 LLM API 调用功能（WC3_LLM_ENDPOINT 环境变量），但未在任何文档中声明。7804行代码被压缩为单行，存在阴影功能风险。

wc3-code.mjs:1
要求提供未混淆源码，披露完整功能。如为 WebClaw3 生态组件应在文档中明确声明
Low Doc Mismatch

SKILL.md 与实际代码功能存在偏差

SKILL.md 声称「全程确定性代码（Extension Relay 操作），不依赖本地 pipeline 子会话服务」，但存在独立的 wc3-code.mjs（LLM 调用工具）且未声明

SKILL.md:1
更新文档明确说明是否使用 LLM 以及使用方式

Declared capability vs actual capability

Network Pass
Declared READ
→
Inferred READ
skill.mjs:RELAY_URL 调用 Extension Relay API
Filesystem Pass
Declared WRITE
→
Inferred WRITE
skill.mjs:writeNoteFile 写入 Markdown 文件

Suspicious artifacts and egress

Medium External URL
http://127.0.0.1:3459

SKILL.md:17

Medium External URL
https://clawhub.ai/user/fatmind

skill-card.md:9

Medium External URL
https://clawhub.ai/fatmind/skills/xhs-fav-export

skill-card.md:39

Medium External URL
https://clawhub.ai/fatmind/skills/webclaw3-browser-automation

skill-card.md:40

Medium External URL
https://www.xiaohongshu.com/

skill-card.md:41

Medium External URL
https://www.xiaohongshu.com/user/profile/$

skill.mjs:388

Dependencies and supply chain

There are no structured dependency warnings.

File composition

6 files · 667 lines
JavaScript 2 files · 522 linesMarkdown 3 files · 140 linesJSON 1 files · 5 lines
Files of concern · 4
skill.mjs JavaScript · 521 lines
https://www.xiaohongshu.com/user/profile/$
wc3-code.mjs JavaScript · 1 lines
wc3-code.mjs 高度代码混淆且未声明
skill-card.md Markdown · 59 lines
https://clawhub.ai/user/fatmind · https://clawhub.ai/fatmind/skills/xhs-fav-export · https://clawhub.ai/fatmind/skills/webclaw3-browser-automation · https://www.xiaohongshu.com/
SKILL.md Markdown · 40 lines
SKILL.md 与实际代码功能存在偏差 · http://127.0.0.1:3459
Other files · README.md · _meta.json

Security positives

skill.mjs 代码质量高，有详细的陷阱注释和错误恢复机制
无外部网络请求（仅连接本地 Extension Relay）
无凭证收割、文件遍历或远程执行行为
纯本地 Markdown 导出，不外传用户数据