Pywayne Cross Comm

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI03: Identity and Privilege Abuse

What this means

If broad OSS credentials are used, transferred files could be uploaded to or retrieved from a cloud bucket beyond the intended scope.

Why it was flagged

The skill documents Aliyun OSS access credentials for file/image/folder transfer. This is purpose-aligned, but those credentials can grant access to a cloud storage bucket.

Skill content

OSS_ACCESS_KEY_ID=your-access-key
OSS_ACCESS_KEY_SECRET=your-access-secret

Recommendation

Use a dedicated, least-privilege OSS key and bucket for this skill, avoid sharing secrets in chat or logs, and rotate the key if exposed.

Note

ASI02: Tool Misuse and Exploitation

What this means

A mistaken or overly broad file/folder path could share more local data than intended.

Why it was flagged

The documented API can upload local files or folders to OSS as part of messaging. This is central to the stated purpose, but local path selection should remain explicit.

Skill content

# File (auto uploads to OSS)
await client.send_message("/path/to/file.txt", CommMsgType.FILE)
...
# Folder (auto uploads to OSS)
await client.send_message("/path/to/folder", CommMsgType.FOLDER)

Recommendation

Only send specific user-approved files or folders, and avoid using broad paths such as home directories or project roots unless that is intended.

Note

ASI07: Insecure Inter-Agent Communication

What this means

If exposed on an untrusted network, unintended clients may be able to connect or exchange messages depending on the underlying library configuration.

Why it was flagged

The examples show a WebSocket server listening on all interfaces and clients identified by client IDs. Network messaging is the core purpose, but the setup examples do not show authentication or transport restrictions.

Skill content

server = CrossCommService(role='server', ip='0.0.0.0', port=9898)
...
client_id='my_client',    # Optional: auto-generated if omitted

Recommendation

Bind to localhost or a trusted interface when possible, use firewall rules or authentication/TLS if supported, and exchange files only with trusted clients.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Users must trust the external package that implements the documented behavior.

Why it was flagged

The skill depends on an external Python module while the supplied artifact set contains only documentation and no install specification or package source.

Skill content

from pywayne.cross_comm import CrossCommService, CommMsgType

Recommendation

Install the pywayne package only from a trusted source and review its package metadata or source before using it in sensitive environments.