Skills/ClawHub/cnexus2-cognitive-os

cnexus2-cognitive-os@1.6.0

CAUTION· static only

Publisher claims: "CNexus 2.0 — 极客的数字第二大脑： 类脑认知架构与活体神经元代谢。 在本地运行的活体数字生命，支持神经元激活扩散、 REM 深度睡眠代谢、虫洞协议、AST 代码投影。" Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher plusunm · publishing for 145 daysInstalls 510Last detonated 41 h ago
What would fix thisWatchDispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-12 and scored it 46/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Destructive file system command detected; Destructive file system command detected; Base64 encoding combined with network call. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

MEDIUM
File type combined with upload actionui/_next/static/chunks/framework-2c534e0e662575a2.js:1 · File type combined with upload action — agent may exfiltrate local data files…nstable_NormalPriority,ec=a.unstable_LowPriority,ef=a.unstable_IdlePriority,ed=a.log,ep=a.unstable_setDisableYieldValue,em=null,eh=null;function eg(e){if("function"==typeof ed&&ep(e),eh&&"function"==typeof eh.setStrictMode)try{eh.setStrict…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
HIGH
Destructive file system command detectedui/_next/static/chunks/main-21b3acb810c375b2.js:1 · Destructive file system command detected… Object.defineProperty(Error("Invalid interception route: "+e+". Must be in the format /<intercepting route>/(..|...|..)(..)/<intercepted route>"),"__NEXT_ERROR_CODE",{…Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Destructive file system command detectedui/_next/static/chunks/255-2aa030c9ba2867e3.js:1 · Destructive file system command detected… Object.defineProperty(Error("Invalid interception route: "+e+". Must be in the format /<intercepting route>/(..|...|..)(..)/<intercepted route>"),"__NEXT_ERROR_CODE",{…Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Base64 encoding combined with network callui/_next/static/chunks/79-f5ab3dc6773c40d2.js:1 · Base64 encoding combined with network call — potential data exfiltration…of Q)try{let r=new AbortController,a=window.setTimeout(()=>r.abort(),e),o=await fetch("".concat(n,"/api/tags"),{signal:r.signal,method:"GET"});if(window.clearTimeout(a),o.ok){let e=0;try{var t,l;e=null!=(l=null==(t=(await o.json()).models)…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
File type combined with upload actionui/_next/static/chunks/79-f5ab3dc6773c40d2.js:1 · File type combined with upload action — agent may exfiltrate local data files…if(window.clearTimeout(a),o.ok){let e=0;try{var t,l;e=null!=(l=null==(t=(await o.json()).models)?void 0:t.length)?l:0}catch(e){}return{reachable:!0,host:n,modelCount:e}}}catch(e){}return{reachable:!1,host:null,modelCount:0}}async function …Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
HIGH
Auto-update or dynamic fetch configurationui/_next/static/chunks/115-87f1acfa6f3c7dc5.js:1 · Auto-update or dynamic fetch configuration — agent may load new code at runtime…随时改回）"},concurrencyMax:{en:"Concurrency (max 2)",zh:"并发数（最大 2）"},autoSynth:{en:"Auto-update cognitive summary",zh:"自动更新认知结论"}},u={config:{en:"Loading config",zh:"加载配置"},hydrating:{en:"Starting",zh:"正在启动"},sync:{en:"Connecting runtime",zh:"…Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionui/_next/static/chunks/255-2aa030c9ba2867e3.js:1 · File type combined with upload action — agent may exfiltrate local data files…(let n of T){let{tree:i,seedData:c,head:s,isRootRender:h}=n;if(!h)return console.log("SERVER ACTION APPLY FAILED"),r(m),e;let R=(0,d.applyRouterStatePatchToTree)([""],o,i,b||e.canonicalUrl);if(null===R)return r(m),(0,v.handleSegmentMismatc…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionui/_next/static/chunks/4bd1b696-c023c6e3521b1417.js:1 · File type combined with upload action — agent may exfiltrate local data files…nstable_NormalPriority,ec=a.unstable_LowPriority,ef=a.unstable_IdlePriority,ed=a.log,ep=a.unstable_setDisableYieldValue,em=null,eh=null;function eg(e){if("function"==typeof ed&&ep(e),eh&&"function"==typeof eh.setStrictMode)try{eh.setStrict…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
HIGH
Base64 encoding combined with network callui/_next/static/chunks/255-2aa030c9ba2867e3.js:1 · Base64 encoding combined with network call — potential data exfiltration…UnusedArgs)(h,y):h,v=await (0,a.encodeReply)(b,{temporaryReferences:_}),g=await fetch(e.canonicalUrl,{method:"POST",headers:{Accept:o.RSC_CONTENT_TYPE_HEADER,[o.ACTION_HEADER]:p,[o.NEXT_ROUTER_STATE_TREE_HEADER]:(0,m.prepareFlightRouterSta…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
HIGH
Hidden zero-width characters detectedui/_next/static/chunks/polyfills-42372ed130431b0a.js:1 · Hidden zero-width characters detected — may conceal content…rtsWith");var Op=zt.PROPER,xp=function(t){return a(function(){return!!Mi[t]()||"​…᠎"!=="​…᠎"[t]()||Op&&Mi[t].name!==t})},Rp=_i.start,Pp=xp("trimStart")?function(…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
MEDIUM
File type combined with upload actionui/_next/static/chunks/polyfills-42372ed130431b0a.js:1 · File type combined with upload action — agent may exfiltrate local data files…imitive"),wl(),bl("toStringTag"),an(L("Symbol"),"Symbol"),bl("unscopables"),an(i.JSON,"JSON",!0),an(Math,"Math",!0);var Ah=Ct.f,jh=dt("metadata"),kh=Function.prototype;void 0===kh[jh]&&Ah(kh,jh,{value:null});var Ih=Ct.f,Th=Rt.f,Mh=i.Symbol…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionui/_next/static/chunks/878-06fdd47559cd8c8c.js:1 · File type combined with upload action — agent may exfiltrate local data files…it fetch("/api/status",{signal:AbortSignal.timeout(3e3)});if(a.ok){let i=await a.json(),{statusToMindOverview:o}=await Promise.resolve().then(n.bind(n,7451)),l=o(i);e({mindOverview:h(l,"runtime"),runtimeReachable:!0,runtimeReady:!0,runtime…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
Python subprocess execution detectedapp_v2.py:2222 · Python subprocess execution detectedsubprocess.Popen(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File type combined with upload actionui/_next/static/chunks/main-21b3acb810c375b2.js:1 · File type combined with upload action — agent may exfiltrate local data files…hSuffix)((0,o.addPathPrefix)(t,"/_next/data/"+e.buildId),"/"===e.pathname?"index.json":".json")),t=(0,o.addPathPrefix)(t,e.basePath),!e.buildId&&e.trailingSlash?t.endsWith("/")?t:(0,a.addPathSuffix)(t,"/"):(0,n.removeTrailingSlash)(t)}},21…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07

Cost to the agent

Instructions loaded
≈493 tok
1 file · 122 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

34 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim plusunm: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Obfuscated code≈ +5 on the totalRemove base64-assembled strings, eval of decoded text and minified blobs. Reviewers and scanners both treat unreadable code as hostile.
  3. Destructive file system command detected≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  4. Base64 encoding combined with network call≈ +4 on the totalPut hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
  5. Auto-update or dynamic fetch configuration≈ +4 on the totalPin versions and sources; vendor anything fetched at install time.
  6. Hidden zero-width characters detected≈ +4 on the totalKeep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim plusunmPropose a patch to the maintainer
cnexus2-cognitive-os@1.6.0 safety verdict: Caution (static only) — KillerSkills