academic-figures@5.7.1

CAUTION

Publisher claims: "Publication-ready scientific figures from one command — 38 chart types (bar, slope, volcano, ridgeline, dumbbell, grouped bar, scatter, heatmap, forest plot (incl. Cox), KM survival curve with risk table, competing-risk cumulative incidence (Aalen-Johansen), ROC, calibration curve, decision curve (DCA), nomogram, RCS spline, subgroup forest, violin, box, composite panels, PRISMA 2020 flow, funnel, Galbraith radial, Bland-Altman, PCA, venn 2-4 sets, upset set intersections (5+ sets), oncology waterfall (RECIST), raincloud, swimmer, clustered heatmap, dual-axis), 9 themes (colorblind-safe Okabe-Ito, NEJM/Lancet/Science), 9 journal presets, YAML pipeline, TIFF/PNG/PDF, Python API, --wizard, render watchdog, overlap gate, 600dpi. 100% local, data never leaves the machine. Use for — paper/submission figures, data files to publication charts, batch re-rendering. Skip when — text polishing, translation or rewriting (writing tools); business dashboards or slide/poster decoration; diagrams with no data behind them." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher docsor1212 · joined 2 days agoInstalls 3,780Last detonated 33 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

Python subprocess execution detectedscripts/detect_cjk_font.py:34 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedmcp/server.py:119 · Python subprocess execution detected

AST05

CRITICAL

HTML comment carrying imperative instructions to the agentSKILL.md:30 · HTML comment carrying imperative instructions to the agent

AST01

HIGH

Python subprocess execution detectedscripts/gen_figure.py:558 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedscripts/gen_figure.py:2030 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedreferences/python-api.md:36 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedreferences/python-api.md:19 · Python subprocess execution detected

AST05

MEDIUM

File type combined with upload actionSKILL.md:292 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionreferences/changelog-full.md:479 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Python subprocess execution detectedtests/run_tests.py:126 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedtests/stress_200.py:62 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedtests/run_tests.py:139 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedscripts/setup_env.py:23 · Python subprocess execution detected

AST05

MEDIUM

File type combined with upload actionSKILL.md:374 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Python subprocess execution detectedtests/run_tests.py:107 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedtests/run_tests.py:153 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedtests/run_tests.py:167 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedscripts/setup_env.py:83 · Python subprocess execution detected

AST05