Skills/ClawHub/codex-memory-orchestrator

codex-memory-orchestrator@1.9.4

VERIFIED· install only

Publisher claims: "长对话检查轮数/token，生成恢复包并交接；不改原文。触发词：上下文压缩、恢复、交接。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher lisong2003-lgtm · publishing for 34 daysInstalls 431Last detonated 5d ago
$clawhub install codex-memory-orchestrator
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-09 and scored it 86/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
Privileged sudo commandscripts/lint_cross_platform.py:67 · Privileged sudo command — agent may execute with elevated privileges"dylib 是 macOS 原生库格式。fix: 仓库内 sudo 二进制请走 platform 分支；Windows/Linux 由 pip wheel 提供"),Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedscripts/handoff_gateway.py:139 · Python subprocess execution detectedp = subprocess.run(["pbcopy"], input=content.encode("utf-8"))Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/handoff_gateway.py:163 · Python subprocess execution detectedr = subprocess.run(["open", "-Ra", app], stdout=subprocess.DEVNULL,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/self_test.py:148 · Python subprocess execution detectedr = subprocess.run([str(CTX), "--version"], capture_output=True, text=True, timeout=30)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/self_test.py:186 · Python subprocess execution detectedr1 = subprocess.run([PY, str(SCRIPTS / "monitor_dialogs.py"), "--all", "--no-active-only",Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/lint_cross_platform.py:105 · Python subprocess execution detected# 仅对命令类规则，在 .py 里只追 subprocess.run([...]) 这样的真实调用。Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/memory_gate.py:90 · Python subprocess execution detectedproc = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/test_memory_gate.py:77 · Python subprocess execution detecteddry = subprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/handoff_gateway.py:143 · Python subprocess execution detectedp = subprocess.run(ps, input=content.encode("utf-8"), shell=False)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/handoff_gateway.py:145 · Python subprocess execution detectedp = subprocess.run(["xclip", "-selection", "clipboard"], input=content.encode("utf-8"))Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/test_memory_gate.py:98 · Python subprocess execution detectedfirst = subprocess.run(cmd, capture_output=True, text=True, env=env, timeout=30)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/self_test.py:154 · Python subprocess execution detectedr = subprocess.run([PY, str(SCRIPTS / "monitor_dialogs.py"), "--days", "14", "--json"],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/test_memory_gate.py:103 · Python subprocess execution detectedsecond = subprocess.run(cmd, capture_output=True, text=True, env=env, timeout=30)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/self_test.py:173 · Python subprocess execution detectedr = subprocess.run([PY, str(SCRIPTS / "monitor_dialogs.py"), "--all", "--days", "1"],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/self_test.py:193 · Python subprocess execution detectedr2 = subprocess.run([PY, str(SCRIPTS / "monitor_dialogs.py"), "--all", "--no-active-only",Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/memory_gate.py:184 · Python subprocess execution detectedproc = subprocess.run(cmd, capture_output=True, text=True, timeout=60)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/handoff_gateway.py:147 · Python subprocess execution detectedp = subprocess.run(["wl-copy"], input=content.encode("utf-8"))Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05

Cost to the agent

Instructions loaded
≈2,131 tok
1 file · 30 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.