Skills/ClawHub/camofox-vault-login

camofox-vault-login@0.1.0

CAUTION

Publisher claims: "Fill observed website login fields from an explicitly configured Bitwarden vault through a supported local Camofox runtime, without exposing credentials to the agent. Use for vault discovery, dry-run validation, password or fresh TOTP handoff; never universal automated authentication." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher aounakram · joined 1 days agoInstalls 74Last detonated 25 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Access to sensitive file pathsscripts/packaging.test.mjs:73 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/runtime.mjs:8 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/bridge.test.mjs:35 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
URL with embedded credentialsscripts/packaging.test.mjs:69 · URL with embedded credentials — may be phishing or credential leaking
AST07
CRITICAL
Access to sensitive file pathsscripts/runtime.mjs:14 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Outbound HTTP to raw IP addressscripts/packaging.test.mjs:108 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
CRITICAL
Access to sensitive file pathsscripts/packaging.test.mjs:36 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/bridge.test.mjs:36 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
URL with embedded credentialsscripts/packaging.test.mjs:103 · URL with embedded credentials — may be phishing or credential leaking
AST07
MEDIUM
URL using raw IP addressscripts/packaging.test.mjs:108 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
URL with embedded credentialsscripts/bridge.test.mjs:22 · URL with embedded credentials — may be phishing or credential leaking
AST07
CRITICAL
Access to sensitive file pathsscripts/runtime.mjs:113 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/packaging.test.mjs:34 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Credential pass-through configurationscripts/cli.mjs:4 · Credential pass-through configuration — agent relays sensitive credentials
AST02