cite-holmes@4.7.0

CAUTION

Publisher claims: "Deep research with machine-verified citations" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher docsor1212 · joined 2 days agoInstalls 2,229Last detonated 32 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

npx invocation of non-well-known packagetools/agentskills_check.py:102 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:147 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:211 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

URL using raw IP addressmcp/verify_refs.py:4828 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Outbound HTTP to raw IP addressscripts/verify_refs.py:4828 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

URL using raw IP addressmcp/verify_refs.py:3175 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Outbound HTTP to raw IP addressscripts/verify_refs.py:3175 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressmcp/verify_refs.py:3175 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

URL using raw IP addressscripts/verify_refs.py:3175 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

npx invocation of non-well-known packagetools/agentskills_check.py:99 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressmcp/verify_refs.py:4828 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

URL using raw IP addressscripts/verify_refs.py:4828 · URL using raw IP address — may bypass domain-based filtering

AST07