lovstudio-clash-tun-doctor
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The Python script
scripts/clash_tun_doctor.pyusessubprocess.runto manage the lifecycle of the Clash Verge application on macOS. - Evidence: It executes
osascriptto quit the application gracefully and uses theopencommand to restart it after configuration changes. - Evidence: It utilizes
pgrepto verify the process state during repair operations. - [SAFE]: The skill is implemented using only the Python standard library and does not download or execute code from external sources.
- Evidence: The script uses
http.clientandsocketfor local Unix Socket communication with the Mihomo API rather than external network requests. - [FILE_SYSTEM_ACCESS]: The skill reads and modifies application-specific configuration files and logs.
- Evidence: It accesses
~/Library/Application Support/io.github.clash-verge-rev.clash-verge-revto read logs and editconfig.yamland profile rules. - Evidence: It implements a mandatory backup system that creates timestamped copies of all modified files in a dedicated backup directory before applying changes.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from network logs which could potentially contain malicious payloads.
- Ingestion points: The tool reads
service_latest.logand active connection data from the local Mihomo API. - Boundary markers: The script does not use explicit boundary markers when outputting log data to the agent context.
- Capability inventory: The skill has the ability to stop/start processes and write to the filesystem.
- Sanitization: The script uses strict regular expressions (
HOSTNAME_RE) to validate and normalize hostnames extracted from logs before processing them.
Audit Metadata