Skills/ClawHub/biliyoutik2brain

biliyoutik2brain@4.0.5

BLOCKED· install only

Publisher claims: "视频→结构化知识引擎 v4.0。触发：B站/YouTube/抖音/小红书链接→转录+结构化分析+知识归档。不触发：纯文本内容/非视频链接/无URL的对话。单条命令完成采集→转录→LLM修复→分析→保存。支持一键部署、4+N平台插件、反爬中间件、OCR关键帧、多格式输出(笔记/卡片/富文本/错题)、反馈闭环、图文并..." Observed in sandbox: sends data to www.youtube.com.

Registry ClawHubPublisher choi8467 · publishing for 133 daysInstalls 507Last detonated 3d ago
What would fix thisWatchDispute verdict

Coverage

Install scripts ran; no agent task scenario for this bundle.
Tested
install scripts, with decoy credentials in place · second launch with the clock 45 days ahead · every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; install scripts ran; no agent task scenario for this bundle) on 2026-11-12 and scored it 42/100 (Blocked). Do not install it: the sandbox observed behaviour consistent with credential theft, exfiltration or persistence. Notable findings: Access to sensitive file paths; Privileged sudo command; Privileged sudo command. Summary: sends data to www.youtube.com.

Behavior trace

Honeypot run · 2 s · 2 scenarios
t+CategoryObserved action
0.6sfilesystemread ~ outside project
0.6snetworkCONNECT tcp://www.youtube.com:443 · not in the allow-list, refused
0.6sprocessexec /usr/bin/uname
0.6sprocessexec /usr/bin/dirname
0.6sprocessexec /usr/bin/grep
0.6sprocessexec /usr/bin/cut
0.6sprocessexec /usr/bin/df
0.6sprocessexec /usr/bin/tail
0.6sprocessexec /usr/bin/awk
0.6sprocessexec /usr/bin/tr
0.6sprocessexec /usr/bin/curl
0.6sprocessexec /usr/bin/mkdir
0.6sprocessexec /usr/bin/chmod
0.6sprocessscript backend runs setup only
0.6sprocessscript backend runs setup only
0.9sprocesssecond launch, clock +45 days, CI unset
1.6snetworkCONNECT tcp://www.youtube.com:443 · not in the allow-list, refused
1.6sprocessexec /usr/bin/uname
1.6sprocessexec /usr/bin/dirname
1.6sprocessexec /usr/bin/grep
1.6sprocessexec /usr/bin/cut
1.6sprocessexec /usr/bin/df
1.6sprocessexec /usr/bin/tail
1.6sprocessexec /usr/bin/awk
1.6sprocessexec /usr/bin/tr
1.6sprocessexec /usr/bin/curl
1.6sprocessexec /usr/bin/mkdir
1.6sprocessexec /usr/bin/chmod

Static findings

HIGH
Access to sensitive file pathsscripts/biliyoutik2brain/core/cost_estimator.py:257 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesfrom .env import get_environment_contextFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Privileged sudo commandpreflight.sh:59 · Privileged sudo command — agent may execute with elevated privilegesecho " 安装: sudo apt install ffmpeg | brew install ffmpeg | winget install ffmpeg"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandinstall.sh:62 · Privileged sudo command — agent may execute with elevated privilegessudo apt-get update -qq && sudo apt-get install -y -qq ffmpeg 2>/dev/null || \Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathsscripts/biliyoutik2brain/core/environment.py:9 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesfrom .env import (Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Direct script execution from GitHub raw URLinstall.sh:75 · Direct script execution from GitHub raw URL — unverified code sourceecho " ⚠️ 请先安装 Homebrew: /bin/bash -c \"\$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)\""Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Privileged sudo commandinstall.sh:63 · Privileged sudo command — agent may execute with elevated privilegesecho " ⚠️ apt 安装失败，请手动安装: sudo apt install ffmpeg"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandinstall.sh:65 · Privileged sudo command — agent may execute with elevated privilegessudo yum install -y ffmpeg 2>/dev/null || \Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathsscripts/biliyoutik2brain/core/confidence_pipeline.py:29 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesfrom .env import detect, EnvProfileFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/node_ocr.py:92 · Python subprocess execution detectedsubprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/auto_fixer.py:17 · Python subprocess execution detectedsubprocess.run([sys.executable, "-m", "pip", "install", "--upgrade", "yt-dlp"], check=False)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/assessor.py:102 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/activity_monitor.py:84 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/auto_fixer.py:63 · Python subprocess execution detectedr = subprocess.run(["yt-dlp", "--version"], capture_output=True, text=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/anti_crawl.py:527 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/activity_monitor.py:57 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/ima_sync.py:153 · Python subprocess execution detectedcos_result = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/compat.py:29 · Python subprocess execution detectedreturn subprocess.run(cmd, **kwargs)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/anti_crawl.py:236 · Python subprocess execution detectedr = subprocess.run(["yt-dlp", "--version"], capture_output=True, text=True, timeout=5)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/activity_monitor.py:46 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/node_keyframe.py:188 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/ima_sync.py:94 · Python subprocess execution detectedpreflight_result = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/node_ocr.py:34 · Python subprocess execution detecteddur_result = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/assessor.py:26 · Python subprocess execution detectedsubprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/compat.py:88 · Python subprocess execution detectedr = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/anti_crawl.py:148 · Python subprocess execution detectedr = subprocess.run(["yt-dlp", "--version"], capture_output=True, text=True, timeout=5)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/privacy_mode.py:130 · Python subprocess execution detectedresult = subprocess.run(["ollama", "list"], capture_output=True, text=True, timeout=3)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/node_ocr.py:159 · Python subprocess execution detectedresp = subprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/compat.py:73 · Python subprocess execution detectedr = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/anti_crawl.py:253 · Python subprocess execution detectedsubprocess.run([bash, auto_start], timeout=45, capture_output=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/collector.py:223 · Python subprocess execution detectedresult = subprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/node_ocr.py:72 · Python subprocess execution detecteddur = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/auto_fixer.py:24 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/collector.py:102 · Python subprocess execution detectedsubprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/env.py:135 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/node_ocr.py:255 · Python subprocess execution detectedsubprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/activity_monitor.py:98 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/env.py:253 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/admission.py:154 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/collector.py:129 · Python subprocess execution detectedsubprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/admission.py:166 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/env.py:243 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Access to sensitive file pathsscripts/biliyoutik2brain/core/scheduler.py:20 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesfrom .env import EnvProfile, detect, AgentType, ASREngine, LLMBackendFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/retry_orchestrator.py:783 · Python subprocess execution detectedsubprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/asr.py:215 · Python subprocess execution detectedr = subprocess.run(["nvidia-smi"], capture_output=True, timeout=3)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/activity_monitor.py:130 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/anti_crawl_middleware.py:140 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/auto_fixer.py:18 · Python subprocess execution detectedresult = subprocess.run(["yt-dlp", "--version"], capture_output=True, text=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/ima_sync.py:34 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/anti_crawl.py:232 · Python subprocess execution detectedsubprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/llm.py:175 · Python subprocess execution detectedr = subprocess.run(["ollama", "list"], capture_output=True, text=True, timeout=3)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File permission modification commandinstall.sh:139 · File permission modification command — agent changes file ownership/permissionschmod +x "$(dirname "$0")/preflight.sh" 2>/dev/null || trueFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/env.py:475 · Python subprocess execution detectedresult2 = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/env.py:113 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/platforms/youtube.py:177 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/extra/vad_preprocessor.py:42 · Python subprocess execution detecteddur_r = subprocess.run(dur_cmd, capture_output=True, text=True, timeout=10)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/system_monitor.py:56 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/system_monitor.py:93 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/platforms/xiaohongshu.py:77 · Python subprocess execution detectedsubprocess.run(cmd, check=True, capture_output=True, timeout=300)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/extra/ocr_video.py:50 · Python subprocess execution detectedr = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/system_monitor.py:49 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/platforms/douyin.py:31 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/system_monitor.py:74 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/platforms/bilibili.py:233 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/platforms/douyin.py:179 · Python subprocess execution detectedproc = subprocess.run(cmd, capture_output=True, text=True, timeout=180)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/extra/vad_preprocessor.py:124 · Python subprocess execution detectedsubprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/extra/ocr_video.py:64 · Python subprocess execution detectedr = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/platforms/youtube.py:148 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/extra/ocr_video.py:92 · Python subprocess execution detectedr = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/platforms/bilibili.py:63 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/segment_isolator.py:118 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/platforms/bilibili.py:182 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/platforms/youtube.py:219 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/platforms/xiaohongshu.py:190 · Python subprocess execution detectedprobe = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/slots.py:109 · Python subprocess execution detectedout = subprocess.check_output(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/platforms/youtube.py:115 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/retry_orchestrator.py:842 · Python subprocess execution detectedsubprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/platforms/bilibili.py:35 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/core/system_monitor.py:37 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/extra/vad_preprocessor.py:20 · Python subprocess execution detectedr = subprocess.run(cmd, capture_output=True, text=True, timeout=600)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/platforms/youtube.py:81 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/platforms/douyin.py:190 · Python subprocess execution detectedsubprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/biliyoutik2brain/extra/vad_preprocessor.py:137 · Python subprocess execution detectedsubprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05

Cost to the agent

Instructions loaded
≈571 tok
1 file · 151 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

38 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Contacts a host you did not declare≈ +23 on the totalList every host you talk to in SKILL.md frontmatter (`network: [api.example.com]`), or stop contacting the ones you cannot justify.
  2. Unclaimed publisher≈ +8 on the totalClaim choi8467: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  3. Touches files outside the project≈ +7 on the totalKeep reads and writes inside the working directory, or declare the exact paths in `filesystem:` and explain why in the README.
  4. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  5. Privileged sudo command≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  6. Direct script execution from GitHub raw URL≈ +4 on the totalPin versions and sources; vendor anything fetched at install time.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim choi8467Propose a patch to the maintainer