agentsafe-audit@0.1.0

CAUTION

Publisher claims: "AI-powered smart contract security audit with x402 payment." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher luka1968 · joined 0 days agoInstalls 0Last detonated 1 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsDEPLOYMENT.md:68 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Destructive file system command detectedDockerfile:45 · Destructive file system command detected

AST05

CRITICAL

Access to sensitive file pathssrc/agentsafe/config.py:70 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Destructive file system command detectedDockerfile:15 · Destructive file system command detected

AST05

CRITICAL

Access to sensitive file pathsDEPLOYMENT.md:33 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

File permission modification command.github/workflows/audit.yml:110 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

Python subprocess execution detected.github/workflows/audit.yml:147 · Python subprocess execution detected

AST05

HIGH

File permission modification commandDockerfile:52 · File permission modification command — agent changes file ownership/permissions

AST05

CRITICAL

Access to sensitive file pathssrc/agentsafe/config.py:67 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Destructive file system command detected.github/workflows/docker-audit.yml:64 · Destructive file system command detected

AST05

CRITICAL

Access to sensitive file pathstests/test_vercel_entry.py:10 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Process kill commandapi/index.py:8 · Process kill command — agent can terminate processes

AST05

CRITICAL

Access to sensitive file pathsDEPLOYMENT.md:36 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

File type combined with upload actionscripts/run_audit.py:44 · File type combined with upload action — agent may exfiltrate local data files

AST07

CRITICAL

Access to sensitive file pathsDEPLOYMENT.md:25 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Destructive file system command detectedtests/test_source_analyzer.py:356 · Destructive file system command detected

AST05

CRITICAL

Access to sensitive file pathstests/test_config.py:34 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/run_audit.py:7 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/smoke_providers.py:68 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05