Skills/ClawHub/authz-code-design

authz-code-design@1.1.3

VERIFIED

Publisher claims: "设计安全授权码 / 本地凭据 broker 的可复用方法论，用于回答「怎么给 AI 发临时权限」「密钥别进模型上下文怎么办」「授权能不能一键收回」这类问题" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher zhaoxinghua09-cell · joined 8 days agoInstalls 552Last detonated 3 h ago
$clawhub install authz-code-design
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-04 and scored it 80/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
File permission modification commandtools/credential_broker.py:26 · File permission modification command — agent changes file ownership/permissionsFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Outbound HTTP to raw IP addresstools/credential_broker.py:444 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST07
MEDIUM
URL using raw IP addresstools/credential_broker.py:444 · URL using raw IP address — may bypass domain-based filteringFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST07
MEDIUM
URL using raw IP addresstools/credential_broker_test.py:41 · URL using raw IP address — may bypass domain-based filteringFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST07
MEDIUM
File permission modification commandtools/credential_broker.py:90 · File permission modification command — agent changes file ownership/permissionsFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
URL using raw IP addresstools/credential_broker_test.py:94 · URL using raw IP address — may bypass domain-based filteringFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST07
MEDIUM
Outbound HTTP to raw IP addresstools/credential_broker_test.py:94 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST07
MEDIUM
Outbound HTTP to raw IP addresstools/credential_broker_test.py:41 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST07