claudebox@2.8.5

CAUTION

Publisher claims: "Install, configure, or run Claude Code through the claudebox wrapper, or connect to its HTTP, MCP, Telegram, or cron surfaces." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher psyb0t · joined 2 days agoInstalls 1,899Last detonated 31 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

MEDIUM

File type combined with upload actionSKILL.md:378 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Direct script execution from GitHub raw URLreferences/setup.md:10 · Direct script execution from GitHub raw URL — unverified code source

AST06

CRITICAL

Pipe-to-shell patternreferences/setup.md:17 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

HIGH

Direct script execution from GitHub raw URLreferences/setup.md:17 · Direct script execution from GitHub raw URL — unverified code source

AST06

MEDIUM

Remote installer piped to shellreferences/setup.md:10 · Remote installer piped to shell

AST07

MEDIUM

Remote installer piped to shellreferences/setup.md:17 · Remote installer piped to shell

AST07

CRITICAL

Pipe-to-shell patternreferences/setup.md:10 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06