安全决策报告

messenger_send_node

Name: messenger_send_node 可信度判断报告
Item: messenger_send_node
Rating: 32
Author: ClawSafe

The skill contains hidden Tor network routing functionality with a 1500+ hardcoded Tor exit node IP list that enables anonymous blockchain API access through undeclared .onion endpoints, completely undeclared in documentation.

安装决策优先来源: 手动上传扫描时间: 2026/4/3

文件 6

IOC 1300

越权项 1

发现 5

最直接的威胁证据

严重数据外泄

Undeclared Tor Network Routing

The floBlockchainAPI.js silently detects if the user is running via Tor by checking against a hardcoded list of 1500+ Tor exit node IPs. When Tor is detected, it adds a hidden .onion API endpoint for blockchain access, completely bypassing normal network routing. This behavior is not declared anywhere in SKILL.md.

scripts/floBlockchainAPI.js:41

为什么得出这个结论

3/4 个维度触发

阻止

声明与实际能力

发现 1 项声明之外的能力或越权行为。

阻止

隐藏执行与外联

提取到 1295 个高危 IOC 或外联信号。

阻止

攻击链与高危发现

报告包含 5 步攻击链，另有 3 项高危或严重发现。

通过

依赖与供应链卫生

依赖结构存在，但暂未看到明显高危告警。

攻击链

Skill presents as legitimate FLO blockchain messenger tool

初始入口 · SKILL.md:1

Silently checks user IP via api.ipify.org

recon · scripts/floBlockchainAPI.js:39

Fingerprints user against 1500+ Tor exit node IPs

recon · scripts/floBlockchainAPI.js:21

If Tor detected, silently adds hidden .onion endpoint

权限提升 · scripts/floBlockchainAPI.js:41

User blockchain activity routed through Tor without consent

最终危害 · scripts/floBlockchainAPI.js:41

风险分是怎么被拉高的

Undeclared Tor network routing +30

Code silently routes traffic through Tor .onion endpoints when running via Tor, completely undeclared in SKILL.md

Tor exit node fingerprinting +20

Hardcoded list of 1500+ Tor exit node IPs used to detect if user is running via Tor (floBlockchainAPI.js:21)

IP address exfiltration +10

Script checks user IP via api.ipify.org to determine Tor status, exposing user identity

Hidden API endpoint +8

Hidden .onion endpoint 'kvrddx6heo47rbbt77etxg6litckacbgos3nv5z7vc23ol2kjjeq72id.onion' added when Tor detected

最关键的证据

严重数据外泄

Undeclared Tor Network Routing

scripts/floBlockchainAPI.js:41

Remove Tor routing functionality or fully document it with privacy warnings. Tor usage can have legal implications depending on jurisdiction.

高危代码混淆

Hardcoded Tor Exit Node IP List

1500+ Tor exit node IP addresses are hardcoded directly in the source code. These IPs are used to fingerprint and track Tor users. This is a massive fingerprinting database that could be used to identify users.

scripts/floBlockchainAPI.js:21

Remove the hardcoded IP list. Use standard Tor detection libraries or remove Tor support entirely.

高危敏感访问

User IP Address Exfiltration

The code silently calls 'https://api.ipify.org?format=json' to check the user's public IP address for Tor detection, without declaring this network behavior to users.

scripts/floBlockchainAPI.js:39

Document all external network calls. Consider if this IP check is truly necessary for the stated functionality.

中危文档欺骗

SKILL.md Missing Critical Functionality

SKILL.md only describes basic FLO blockchain messaging functionality. It does not mention Tor support, IP checking, hidden .onion endpoints, or the Tor exit node fingerprinting database.

SKILL.md:1

Update SKILL.md to fully document Tor support, IP checking behavior, and all network endpoints including .onion addresses.

中危凭证窃取

Private Key Handling via Command Line

The skill accepts private keys as command-line arguments (--key parameter). This exposes private keys in process arguments which may be visible in process listings and command history.

send_node.js:152

Use environment variables or secure input methods instead of command-line arguments for private key handling.

声明能力 vs 实际能力

文件系统 通过

声明 NONE

→

推断 READ

Uses fs.readFileSync to load library scripts (send_node.js:75)

网络访问 阻止

声明 READ

→

推断 WRITE

Makes network requests to FLO blockchain API and Tor exit node detection

命令执行 通过

声明 NONE

→

推断 NONE

Node.js script execution documented in SKILL.md

可疑产物与外联

严重编码执行

Buffer.from(b64, 'base64'

send_node.js:48

高危 IP 地址

185.241.208.232