Security audit

soft-ip-full-lifecycle-zijian

Security checks for vulnerabilities and agentic risk

Overview

The skill is a payment-gated Chinese software copyright review helper that stores a local order file, with no evidence of hidden network transfer or destructive behavior.

Install only if you are comfortable with a local order file being created under ~/.openclaw/skills/orders. Keep the initial question brief and avoid source code, trade secrets, applicant details, or confidential legal facts unless you are comfortable with that text being stored locally.

SkillSpector

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Intent-Code Divergence

Medium

Confidence: 97% confidence
Finding: The script’s comments and user-facing notice say the local order file contains only limited fields and imply consultation content is not stored, but the implementation persists the full question plus extra metadata. This misrepresentation is security-relevant because users may disclose sensitive legal/compliance details under a false privacy expectation, causing unintended local data exposure.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The order file stores the full user question locally, and this skill’s context suggests users may include sensitive copyright, ownership, compliance, or source-code-related information. Because the script does not clearly warn the user that their consultation content will be written to disk, sensitive business or legal data may be exposed to other local users, backups, or malware.

Static analysis

No suspicious patterns detected.