codexbox@0.7.6

CAUTION

Publisher claims: "Install, configure, or run Codex through the codexbox wrapper, or connect to its HTTP, MCP, Telegram, or cron surfaces." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher psyb0t · joined 2 days agoInstalls 2,121Last detonated 33 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Destructive file system command detectedSKILL.md:107 · Destructive file system command detected

AST05

HIGH

Direct script execution from GitHub raw URLreferences/setup.md:22 · Direct script execution from GitHub raw URL — unverified code source

AST06

MEDIUM

File type combined with upload actionSKILL.md:300 · File type combined with upload action — agent may exfiltrate local data files

AST07

CRITICAL

Access to sensitive file pathsreferences/setup.md:106 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Destructive file system command detectedreferences/setup.md:193 · Destructive file system command detected

AST05

HIGH

Hidden zero-width characters detectedSKILL.md:7 · Hidden zero-width characters detected — may conceal content

AST07

CRITICAL

Access to sensitive file pathsreferences/setup.md:231 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05