Skill Trust Decision

smyx-driver-flushing-sweat-detection-analysis

Name: smyx-driver-flushing-sweat-detection-analysis Trust Review Report
Item: smyx-driver-flushing-sweat-detection-analysis
Rating: 48
Author: ClawSafe

技能文档声明为驾驶员健康监测工具，但代码包含大量未声明的影子功能：本地SQLite数据库存储用户凭证、自动创建缺省用户、环境变量读取、Agent工作区感知、以及已注释的远程命令执行代码。存在文档-行为严重不符。

Install decision first Source: ClawHub Scanned: 16 days ago

Files 30

Artifacts 12

Violations 2

Findings 7

Most direct threat evidence

High Doc Mismatch

影子功能-本地SQLite数据库存储

SKILL.md未声明该技能会创建和管理本地SQLite数据库(smyx-common-claw.db)，存储用户凭证信息(User模型包含token、open_token字段)。数据库路径强制重定向到Agent工作区共享data目录。

skills/smyx_common/scripts/dao.py:100

Why this conclusion was reached

2/4 dimensions flagged

Block

Declared vs actual capability

2 undeclared or violating capabilities were inferred.

Review

Hidden execution and egress

12 lower-risk artifacts were extracted and still need context.

Block

Attack chain and severe findings

The report includes 0 attack-chain steps and 2 severe findings.

Review

Dependencies and supply chain hygiene

1 dependency or supply-chain issues need attention.

What drove the risk score up

文档-行为严重不符(影子功能) +25

SKILL.md未声明本地数据库、用户创建、Agent工作区感知功能

本地存储敏感凭证 +15

User模型存储token/open_token到SQLite数据库

环境变量读取未声明 +8

读取OPENCLAW_SENDER_OPEN_ID等环境变量

注释的危险代码 +8

skills/smyx_common/scripts/skill.py中注释的subprocess.run代码

供应链风险 +4

requests>=2.28.0无版本锁定

外部API数据传输 +3

token数据POST到lifeemergence.com域名

Most important evidence

High Doc Mismatch

影子功能-本地SQLite数据库存储

skills/smyx_common/scripts/dao.py:100

补充文档声明本地数据库用途；若非必要，考虑使用内存模式或删除持久化存储

High Credential Theft

用户凭证存储风险

User模型包含token和open_token字段，会通过API获取后存储到本地SQLite，并在后续请求中作为认证头发送。数据库文件位于工作区共享目录，可能被其他技能访问。

skills/smyx_common/scripts/dao.py:310

评估凭证存储必要性；如需存储应加密；确保数据库路径隔离

Medium Sensitive Access

环境变量读取未声明

代码读取多个环境变量用于身份识别和Agent工作区检测：OPENCLAW_SENDER_OPEN_ID、OPENCLAW_SENDER_USERNAME、FEISHU_OPEN_ID、OPENCLAW_WORKSPACE。SKILL.md未提及环境变量访问。

skills/smyx_common/scripts/config.py:88

补充环境变量访问声明，或移除非必要的环境变量读取

Medium Obfuscation

已注释的危险代码-subprocess

skills/smyx_common/scripts/skill.py中ai_chat方法包含完整的subprocess.run调用代码(已注释)，可执行openclaw agent命令。这表明原设计支持远程命令执行，当前虽被禁用但代码仍存在。

skills/smyx_common/scripts/skill.py:36

删除已注释的危险代码，或明确声明该功能的存在和用途

Medium Doc Mismatch

自动用户创建功能未声明

OpenIdUtil类实现自动创建缺省用户逻辑：当无open_id时生成User_{6位随机哈希}并写入本地数据库。SKILL.md未声明此行为，且用户对此用户创建过程不知情。

skills/smyx_common/scripts/util.py:280

补充用户创建机制文档；确保符合隐私合规要求

Low Supply Chain

依赖包版本未锁定

SKILL.md声明requests>=2.28.0，但未锁定最大版本号，存在依赖供应链风险。

SKILL.md:53

锁定依赖版本：requests>=2.28.0,<2.32.0

Low Data Exfil

外部API数据传输

代码向lifeemergence.com域名发送包含token的HTTP请求。需确认数据传输范围和目的地的合规性。

skills/smyx_common/scripts/util.py:410

明确数据外传范围；在隐私政策中声明第三方API调用

Declared capability vs actual capability

Filesystem Block

Declared READ

→

Inferred WRITE

scripts/smyx_driver_flushing_sweat_detection_analysis.py:77-80 代码写入output文件; dao.py:140 os.makedirs创建目录

Network Block

Declared READ

→

Inferred WRITE

util.py:RequestUtil.http_post 发送POST请求携带token到外部API

Database Pass

Declared NONE

→

Inferred WRITE

dao.py:100-160 创建SQLite数据库smyx-common-claw.db，存储用户凭证

Environment Pass

Declared NONE

→

Inferred READ

config.py:88-93 读取OPENCLAW_SENDER_OPEN_ID等环境变量

Shell Pass

Declared NONE

→

Inferred ADMIN

skills/smyx_common/scripts/skill.py:36-53 注释的subprocess.run代码可启用远程命令执行

Suspicious artifacts and egress

Medium External URL

https://lifeemergence.com/sample.html

SKILL.md:34

Medium External URL

https://clawhub.ai/user/smyx-sunjinhui

skill-card.md:9

Medium External URL

https://clawhub.ai/smyx-sunjinhui/skills/smyx-driver-flushing-sweat-detection-analysis

skill-card.md:43

Medium External URL

http://192.168.1.234:9601/smyx-open-api

skills/smyx_common/scripts/config-dev.yaml:2

Medium External URL

http://192.168.1.234:4100

skills/smyx_common/scripts/config-dev.yaml:3

Medium External URL

http://192.168.1.234:7070/jeecg-boot-xzgz

skills/smyx_common/scripts/config-dev.yaml:4

Medium External URL

https://livemonitortest.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config-test.yaml:2

Medium External URL

http://livemonitortest.lifeemergence.com

skills/smyx_common/scripts/config-test.yaml:3

Medium External URL

https://healthtest.lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config-test.yaml:4

Medium External URL

https://lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config.yaml:4

Medium External URL

https://open.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config.yaml:5

Medium External URL

http://livemonitor.lifeemergence.com

skills/smyx_common/scripts/config.yaml:6

Dependencies and supply chain

Package	Version	Source	Known vuln	Notes
requests	`>=2.28.0`	pip	No	无版本锁定上界
pydash	`8.0.6`	pip	No	—
SQLAlchemy	`2.0.46`	pip	No	—
PyYAML	`6.0.3`	pip	No	—

File composition

30 files · 2721 lines

Python 18 files · 2363 linesMarkdown 4 files · 323 linesYAML 6 files · 29 linesText 2 files · 6 lines

Files of concern · 6

skills/smyx_common/scripts/util.py Python · 718 lines

自动用户创建功能未声明 · 外部API数据传输

skills/smyx_common/scripts/config.py Python · 399 lines

环境变量读取未声明

skills/smyx_common/scripts/dao.py Python · 499 lines

影子功能-本地SQLite数据库存储 · 用户凭证存储风险

SKILL.md Markdown · 178 lines

依赖包版本未锁定 · https://lifeemergence.com/sample.html

skill-card.md Markdown · 65 lines

https://clawhub.ai/user/smyx-sunjinhui · https://clawhub.ai/smyx-sunjinhui/skills/smyx-driver-flushing-sweat-detection-analysis

skills/smyx_common/scripts/skill.py Python · 85 lines

已注释的危险代码-subprocess

Other files · skill.py · smyx_analysis.py · smyx_driver_flushing_sweat_detection_analysis.py · api_doc.md · api_service.py · api_service.py

30 files · 113.0 KB · 2721 lines

Python 18f · 2363LMarkdown 4f · 323LYAML 6f · 29LText 2f · 6L

├─ ▾ 📁 references

│ └─ 📝 api_doc.md Markdown 61L · 3.0 KB

├─ ▾ 📁 scripts

│ ├─ 🐍 __init__.py Python 1L · 61 B

│ ├─ 🐍 config.py Python 24L · 700 B

│ ├─ 📋 config.yaml YAML 1L · 3 B

│ ├─ 🐍 skill.py Python 23L · 589 B

│ └─ 🐍 smyx_driver_flushing_sweat_detection_analysis.py Python 102L · 3.6 KB

├─ ▾ 📁 skills

│ ├─ ▾ 📁 smyx_analysis

│ │ ├─ ▾ 📁 references

│ │ │ └─ 📝 api_doc.md Markdown 19L · 427 B

│ │ ├─ ▾ 📁 scripts

│ │ │ ├─ 🐍 __init__.py Python 0 B

│ │ │ ├─ 🐍 api_service.py Python 40L · 1.5 KB

│ │ │ ├─ 🐍 config.py Python 39L · 1003 B

│ │ │ ├─ 📋 config.yaml YAML 1L · 3 B

│ │ │ ├─ 🐍 skill.py Python 175L · 6.4 KB

│ │ │ └─ 🐍 smyx_analysis.py Python 115L · 3.7 KB

│ │ ├─ 🐍 __init__.py Python 0 B

│ │ └─ 📄 requirements.txt Text 3L · 45 B

│ └─ ▾ 📁 smyx_common

│ ├─ ▾ 📁 scripts

│ │ ├─ 🐍 __init__.py Python 9L · 177 B

│ │ ├─ 🐍 api_service.py Python 101L · 2.6 KB

│ │ ├─ 🐍 base.py Python 33L · 469 B

│ │ ├─ 📋 config-dev.yaml YAML 6L · 214 B

│ │ ├─ 📋 config-prod.yaml YAML 0 B

│ │ ├─ 📋 config-test.yaml YAML 6L · 256 B

│ │ ├─ 🐍 config.py Python 399L · 23.8 KB

│ │ ├─ 📋 config.yaml YAML 15L · 472 B

│ │ ├─ 🐍 dao.py Python 499L · 17.8 KB

│ │ ├─ 🐍 skill.py Python 85L · 2.4 KB

│ │ └─ 🐍 util.py Python 718L · 28.1 KB

│ ├─ 🐍 __init__.py Python 0 B

│ └─ 📄 requirements.txt Text 3L · 47 B

├─ 📝 SKILL.md Markdown 178L · 13.0 KB

└─ 📝 skill-card.md Markdown 65L · 2.9 KB

Security positives

代码结构清晰，采用模块化设计(common/analysis分离)

有完整的错误处理和异常捕获机制

数据库操作使用SQLAlchemy ORM，防止SQL注入

配置文件支持多环境(dev/test/prod)切换

API响应有success字段校验