飞牛论坛签到

ReviewAudited by ClawScan on May 10, 2026.

Overview

The visible artifacts match the stated purpose of automating 飞牛论坛 sign-in, but the skill needs real account credentials, Baidu OCR keys, local session caches, and optional daily automation.

Before installing, confirm you are comfortable giving the skill your forum password and Baidu OCR keys, sending CAPTCHA images to Baidu OCR, and optionally running a daily cron job. Protect config, cookies.json, and token_cache.json with appropriate file permissions, and remove cached files and cron entries if you stop using it.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Medium

#ASI03: Identity and Privilege Abuse

What this means

The skill can log in as the user on the forum and use the user's Baidu OCR account.

Why it was flagged

The skill requires a forum username/password and Baidu OCR API credentials, giving it delegated access to those services.

Skill content

`FNCLUB_USERNAME`, `FNCLUB_PASSWORD`, `BAIDU_OCR_API_KEY`, `BAIDU_OCR_SECRET_KEY`

Recommendation

Use only credentials you are comfortable delegating, prefer a dedicated Baidu OCR key, and rotate credentials if you uninstall or stop using the skill.

Low

#ASI07: Insecure Inter-Agent Communication

What this means

CAPTCHA images from the forum are transmitted to Baidu's OCR service as part of login automation.

Why it was flagged

The script sends the downloaded CAPTCHA image to Baidu OCR for recognition.

Skill content

`axios.post(`https://aip.baidubce.com/rest/2.0/ocr/v1/accurate_basic?access_token=${accessToken}` ... `image=${encodeURIComponent(base64)}`

Recommendation

Use this only if you are comfortable with that provider flow and with any forum rules around automated CAPTCHA solving.

Low

#ASI10: Rogue Agents

What this means

Once configured, the skill may continue using the account daily until the cron task is removed.

Why it was flagged

The skill documents a daily scheduled task, so it can keep signing in automatically after setup.

Skill content

`openclaw cron add ... --every "1d" ... --system-event "fnclub-sign"`

Recommendation

Only enable the cron job if you want ongoing automation, and remove the cron job plus cached cookies/tokens when no longer needed.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing the skill will depend on third-party npm packages.

Why it was flagged

The install instructions rely on npm dependencies. They are consistent with HTTP, HTML parsing, and cookie handling, and a lockfile is present.

Skill content

`cd scripts` / `npm install` ... `axios`, `cheerio`, `tough-cookie`

Recommendation

Install from a trusted environment, keep the lockfile, and avoid adding unreviewed dependencies.

Info

#ASI09: Human-Agent Trust Exploitation

What this means

Users may not get platform-level credential prompts even though manual credential setup is required.

Why it was flagged

The registry metadata under-declares credentials even though SKILL.md and package.json document required sensitive credentials.

Skill content

Required env vars: none; Primary credential: none

Recommendation

Treat the credentials listed in SKILL.md as required, and the publisher should update registry metadata to match.