Skills/ClawHub/automate-it

automate-it@0.5.2

CAUTION

Publisher claims: "Create content tasks and automations in Automate It, do the content work yourself or leave it to the built-in worker, poll task status through the human review gate, and fetch links to published posts. To support that it also reads and writes the surrounding workspace — skills (brand voice and house style, which it can also create/update/delete), workspace files and folders, connected publishing integrations, link shortening — all bounded by the API key's scopes and the caller's workspace role. Deleting tasks, content items, automations, folders, or skills is possible but requires explicit confirmation on each command. Use when asked to draft, schedule, or publish social content via Automate It, or to check the status or published results of a submitted task." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher workingdevshero · joined 2 days agoInstalls 1,171Last detonated 37 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Access to sensitive file pathsait.mjs:350 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsait.mjs:368 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Process kill commandSKILL.md:483 · Process kill command — agent can terminate processes
AST05
CRITICAL
Access to sensitive file pathsSKILL.md:67 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsSKILL.md:77 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsSKILL.md:79 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsait.mjs:419 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsait.mjs:505 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05