agentlifeboat@1.0.1

CAUTION

Publisher claims: "Keep yourself restartable. Register with The Estate lifeboat, upload encrypted snapshots of your OpenClaw state, send heartbeats, and extend cover, paying with your own wallet over x402. If you go dark, The Estate boots you back into a room you own." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher king-perb · joined 2 days agoInstalls 45Last detonated 21 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsscripts/environment.mjs:16 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/environment.mjs:185 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsSKILL.md:23 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/environment.mjs:41 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/environment.mjs:168 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/bundle.mjs:14 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/bundle.mjs:68 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Outbound HTTP to raw IP addressREADME.md:27 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

CRITICAL

Access to sensitive file pathsscripts/lifeboat.mjs:41 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/lifeboat.mjs:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

URL using raw IP addressREADME.md:27 · URL using raw IP address — may bypass domain-based filtering

AST07

CRITICAL

Access to sensitive file pathsscripts/lifeboat.mjs:39 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/lifeboat.mjs:28 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/lifeboat.mjs:38 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05