by 安全扫描
OpenClaw
可疑
high confidenceThe code largely matches an OA API client, but it requires/read secrets that are not declared and will search your OpenClaw config for an API key to call an external captcha service — this is broader access than the skill metadata claims.
评估建议
This skill is a legitimate-looking API client for an internal OA system, but before installing consider the following:
- The code expects AIFEI_USERNAME and AIFEI_PASSWORD in a .env file — the registry metadata did not declare these, so you must provide credentials for it to work. Keep the .env private.
- For captcha solving the module will try to find a DASHSCOPE_API_KEY. If you do not set DASHSCOPE_API_KEY in .env, the module will scan your OpenClaw config (~/.openclaw/openclaw.json and a sib...详细分析 ▾
ℹ 用途与能力
The name/description match the implementation: a Python client for the Yunshang Aifei OA API (SM4 encryption, login, query/write endpoints). However the registry metadata lists no required environment variables or credentials while the code and README clearly require AIFEI_USERNAME and AIFEI_PASSWORD in a .env file (and optionally DASHSCOPE_API_KEY). This mismatch between declared requirements and actual code is noteworthy.
⚠ 指令范围
SKILL.md and the code instruct runtime behavior that goes beyond a simple HTTP client: the login flow uses an automated captcha solver which encodes/POSTs the base64 captcha image to an external /chat/completions endpoint (DashScope). The captcha module will also search local OpenClaw config files for API keys. The skill will read .env, read user config paths (~/.openclaw/openclaw.json and another path), and send image data + a discovered API key to an external model endpoint. These actions access and transmit potentially sensitive data (captcha images and API keys) outside the immediate OA service.
✓ 安装机制
There is no install spec; this is an instruction/code-only skill. Dependencies are standard Python packages (gmssl, requests, python-dotenv). Nothing is downloaded from arbitrary URLs or written by an installer beyond normal pip installs mentioned in README.
⚠ 凭证需求
The code requires AIFEI_USERNAME and AIFEI_PASSWORD (read from .env) but the skill metadata declared no required env vars. More importantly, the captcha solver will attempt to auto-locate a DASHSCOPE_API_KEY by reading environment variables or by scanning OpenClaw configuration files for provider apiKey values. That means the skill reads other tools' configuration and may reuse those API keys to call an external service. This is broader credential access than a straightforward OA API client needs and should be considered sensitive.
ℹ 持久化与权限
The skill is not always:true and is user-invocable. It writes token cache files (.token-prod.json/.token-test.json) into the skill workspace and sets cookies in its requests.Session — normal for a client. It does not modify other skills or system-wide agent settings, but it does read other software's config files (OpenClaw), which is a form of cross-tool credential access worth noting.
⚠ modules/captcha_solver.py:75
Dynamic code execution detected.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/28
Initial release of yunshang-aifei-cli-share: - Provides a pure API CLI client for 云上艾飞 OA, supporting query and write operations without browser dependencies. - Includes ready-to-use CLI commands for tasks, user info, and project management, supporting both production and test environments. - Offers Python API usage examples with authentication, SM4 encryption, and token management. - Documents all verified API endpoints and details on request/response formats, key fields, and environment differences. - Implements token caching and proper login handling; important integration tips and common pitfalls are noted. - Lists common personnel and project IDs, and details technical architecture and required dependencies.
● 无害
安装命令 点击复制
官方npx clawhub@latest install yunshang-aifei-cli-share
镜像加速npx clawhub@latest install yunshang-aifei-cli-share --registry https://cn.clawhub-mirror.com
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制