han-jr-system
What this skill does
The skill is an automation tool for contacting 1688 suppliers, searching for products, and handling anti-crawling measures. It is designed for legitimate business use, such as market research or suppl
github/leoyeai - Insecure Data Handling - 2.1k stars
Threat analysis
Skill info
pkg:github/LeoYeAI/openclaw-master-skills@e5199b5?skill=han-jr-systemAssessments (3)
Insecure Data Handling
Insecure Data Handling via local-llm-review
scripts/batch_inquire.py
The script uses `subprocess.run` to execute `click_wangwang_and_inquire.py`, which may be a local script that interacts with 1688's Wangwang messaging system. If this script is not properly secured, iPotential Misuse of Chrome Profile
Potential Misuse of Chrome Profile via local-llm-review
scripts/chrome_launch.py
The script launches Chrome with a specific user data directory (`--user-data-dir`). If this directory contains sensitive information (e.g., login cookies, saved passwords), it could be a risk if the dLack of Input Validation
Lack of Input Validation via local-llm-review
scripts/batch_search.py
The script uses user-provided keywords directly in the search command without validation. While this is not inherently malicious, it could be a risk if the script is used with untrusted input that couBadge
Add the Anomity scan badge for han-jr-system to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of han-jr-system? Report an issue or request a rescan.
