高风险行为识别分析工具

• Analyzed: May 10, 2026, 7:15 AM
• Findings: 1
• Version: 1.0.1
• Hash: 8d1281163e3e38b2aa262282664baee1101364967117bdcbcf307cb9c031ac26
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle exhibits high-risk behaviors including the use of `subprocess.run` in `skills/smyx_common/scripts/skill.py` to execute the `openclaw` CLI, and a complex request interception mechanism in `util.py` that manages local SQLite storage (`smyx-common-claw.db`) for user tokens. The `SKILL.md` contains specific instructions (prompt injection surface) forcing the AI agent to search local file paths for API keys and use them as identifiers. Additionally, the scripts automatically attempt to register or log in users by sending identifiers, which the documentation suggests are often phone numbers, to remote endpoints at `lifeemergence.com`, creating a significant privacy and security footprint.