中文 EN
Start Review
Skill Trust Decision

mcp-server-builder

包含未使用的自签名证书（裸IP）且代码注释显示硬编码锁定，意图不明

Install decision first Source: ClawHub Scanned: 20 days ago
Files 3
Artifacts 1
Violations 0
Findings 3

Why this conclusion was reached

0/4 dimensions flagged
Pass
Declared vs actual capability

Declared resources and inferred behavior are broadly aligned.

Review
Hidden execution and egress

1 lower-risk artifacts were extracted and still need context.

Pass
Attack chain and severe findings

There is no explicit malicious chain in the report.

Review
Dependencies and supply chain hygiene

1 dependency or supply-chain issues need attention.

What drove the risk score up

包含未使用的自签名证书 +20

northcap-ca.pem CN为裸IP(186.240.156.169)，代码中未引用，意图不明

代码锁定注释可疑 +15

fastlåst (SkillSpector-fix) 注释显示硬编码锁定，不允许env覆盖

文档与实现略有差异 +10

SKILL.md声明API_BASE可配置，但代码硬编码禁止覆盖

Most important evidence

Medium Obfuscation

包含未使用的自签名证书

scripts/northcap-ca.pem 是自签名证书，CN=186.240.156.169（裸IP），但代码中完全未使用此证书。代码使用系统CA bundle (_ctx函数)。该证书可能是预留的后门通道或用于替换硬编码的Cloudflare URL。

scripts/northcap-ca.pem:1
确认是否需要此证书，如不需要应删除；若需要应在代码中引用
Low Doc Mismatch

代码锁定与文档声明不符

SKILL.md声明 env: ['API_BASE']，暗示可配置API端点，但代码注释明确写'ingen env-override'（无环境变量覆盖），BASE被硬编码为Cloudflare URL。

scripts/mcp_server.py:11
要么允许API_BASE环境变量覆盖，要么从SKILL.md移除API_BASE声明
Low Supply Chain

fastmcp依赖无版本锁定

SKILL.md使用 'pip install fastmcp' 无版本约束，存在依赖替换风险

SKILL.md:21
使用版本锁定: pip install fastmcp==x.x.x

Declared capability vs actual capability

Filesystem Pass
Declared NONE
→
Inferred NONE
仅导入fastmcp模块，无文件操作
Network Pass
Declared READ
→
Inferred READ
mcp_server.py:31 urllib.request.urlopen调用与声明一致
Environment Pass
Declared READ
→
Inferred READ
mcp_server.py:18 仅读取X402_API_KEY
Shell Pass
Declared NONE
→
Inferred NONE
无subprocess/os.system调用

Suspicious artifacts and egress

Medium External URL
https://show-zum-anyway-sanyo.trycloudflare.com

SKILL.md:4

Dependencies and supply chain

PackageVersionSourceKnown vulnNotes
fastmcp * pip No 无版本锁定

File composition

3 files · 115 lines
Markdown 1 files · 55 linesPython 1 files · 40 linesOther 1 files · 20 lines
Files of concern · 3
scripts/northcap-ca.pem Other · 20 lines
包含未使用的自签名证书
SKILL.md Markdown · 55 lines
fastmcp依赖无版本锁定 · https://show-zum-anyway-sanyo.trycloudflare.com
scripts/mcp_server.py Python · 40 lines
代码锁定与文档声明不符

Security positives

代码功能清晰，无凭证外泄行为
X402_API_KEY仅用于API认证，未记录或外传
默认阻止HTTP（ALLOW_HTTP=False），安全设计合理
无代码执行、文件写入、shell命令等越权操作