蜀宁 OA 工时管理

蜀宁 OA 工时管理，支持提交、修改、查询工时等功能。

This skill's functionality (login, list, submit, query, update) is coherent with its code, but there are some things to check before installing: - Confirm the missing declarations: SKILL.md and code require openssl and an OA_ENC_KEY (or a cached key file), yet the registry metadata listed no required binaries or env vars. Ask the author or maintainer to correct the registry metadata if you need explicit declarations for review/audit. - Protect credentials: the skill reads a credentials file (~/.openclaw/workspace/memory/sn-work-record-credentials.md) which may be plain or .enc. If you use encryption, ensure OA_ENC_KEY is provided securely and file permissions restrict access (chmod 600). Prefer using .enc and providing the key only in a secure way. - Evaluate the OCR handling: the captcha solver strips non-digit/operator characters then eval()s the expression. This is fragile — if the OCR output is malicious or the OA endpoint is compromised to return crafted captcha strings, eval could run unexpected code. If you will run this in a sensitive environment, review/modify the code to compute arithmetic safely (e.g., parse the expression into numbers/operators rather than eval). - Check openssl availability: the code calls openssl via subprocess to decrypt files; ensure openssl on your system is the expected binary (absolute path if you want extra safety) and that using subprocess is acceptable in your environment. - Network scope: the scripts will send credentials and tokens to the OA base URL you supply — confirm the base URL points to your internal OA server and not an untrusted external host. - Run in isolation first: test in an isolated account/container with test OA credentials before using with real accounts. If you are uncomfortable with any of the above or with the metadata mismatch, treat the skill as untrusted until the author clarifies and/or you harden the deployment (restrict files, review/patch eval usage, set explicit bin paths).

Type: OpenClaw Skill Name: sn-work-record Version: 1.4.3 The skill automates work record management for a specific OA system but contains high-risk code patterns. Specifically, `oa_utils.py` uses `eval()` to solve arithmetic captchas after a regex filter, which is a classic RCE vulnerability pattern. Additionally, `runtime_bootstrap.py` implements a complex mechanism to automatically locate and execute alternative Python interpreters from various virtual environment paths (e.g., `~/.openclaw/workspace/ddddocr_env/bin/python`), which is an unusually powerful execution capability for a skill bundle. While these features appear intended for functionality and dependency management, they represent a significant attack surface.