Skills/ClawHub/cargo-segmentation

cargo-segmentation@1.2.2

VERIFIED

Publisher claims: "Builds Cargo segments, named and reusable audiences. A segment is a saved filter over a model (Companies, Contacts…) that defines who a batch run, a scheduled play or an export targets. Creates one, counts who matches, and shows who joined or left. Triggers: "build a segment of", "filter my contacts where", "who matches this criteria", "save this as a list", "how many companies match", "the Closed-Won segment", "everyone who has not been emailed", "target only accounts that", "what is in this segment", "narrow this down to". Skip when: running something over the segment, use cargo-orchestration; exporting its rows, use cargo-analytics; ad-hoc SQL over the model, use cargo-storage." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher cargo-ai · joined 13 days agoInstalls 596Last detonated 1 h ago
$clawhub install cargo-segmentation
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-04 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
npx invocation of non-well-known packageSKILL.md:34 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06

No other findings across 487 lines in 5 files.

cargo-segmentation@1.2.2 safety verdict: Verified 88/100 — KillerSkills