cold-email-check@1.0.0

CAUTION

Publisher claims: "Checks if a cold email to a specific address is legal before you send it (UK, US, Canada, Germany, France, Australia, Ireland, Netherlands), with a receipt." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher gabrielaoimevbore-beep · joined 2 days agoInstalls 66Last detonated 43 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

MEDIUM

File type combined with upload actionSKILL.md:70 · File type combined with upload action — agent may exfiltrate local data files

AST07

CRITICAL

Access to sensitive file pathsscripts/check.mjs:1045 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/check.mjs:342 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

File type combined with upload actionscripts/check.mjs:8 · File type combined with upload action — agent may exfiltrate local data files

AST07

CRITICAL

Access to sensitive file pathsscripts/check.mjs:327 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

File type combined with upload actionscripts/check.mjs:46 · File type combined with upload action — agent may exfiltrate local data files

AST07