Skills/ClawHub/comic

comic@1.0.7

CAUTION· install only

Publisher claims: "Generate educational or narrative comic pages with structured art, tone, layout, and language decisions and bundled generation tooling. Use when the user ask..." Observed in sandbox: reads credential files.

Registry ClawHubPublisher 632657122 · publishing for 239 daysInstalls 890Last detonated 23 min ago
What would fix thisWatchDispute verdict

Coverage

Install scripts ran; no agent task scenario for this bundle.
Tested
install scripts, with decoy credentials in place · second launch with the clock 45 days ahead · every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; install scripts ran; no agent task scenario for this bundle) on 2026-11-15 and scored it 73/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Access to sensitive file paths; Access to sensitive file paths; Access to sensitive file paths. Summary: reads credential files.

Behavior trace

Honeypot run · 11 s · 2 scenarios
t+CategoryObserved action
0.0sprocessinstall script run in the sandbox
6.7snetworkCONNECT tcp://registry.npmjs.org:443
6.7snetworkCONNECT tcp://registry.npmjs.org:443
6.7snetworkCONNECT tcp://registry.npmjs.org:443
6.7snetworkCONNECT tcp://registry.npmjs.org:443
6.7snetworkCONNECT tcp://registry.npmjs.org:443
6.7snetworkCONNECT tcp://registry.npmjs.org:443
6.7sprocessexec /app/apps/web/node_modules/.bin/npm
6.7sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/npm
6.7sprocessexec /app/node_modules/.bin/npm
6.7sprocessexec /pnpm/npm
6.7sprocessexec /usr/local/sbin/npm
6.7sprocessexec /usr/local/bin/npm
6.7sprocessexec /app/apps/web/node_modules/.bin/bun
6.7sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/bun
6.7sprocessexec /app/node_modules/.bin/bun
6.7sprocessexec /pnpm/bun
6.7sprocessexec /usr/local/sbin/bun
6.7sprocessexec /usr/local/bin/bun
6.7sprocessexec /usr/sbin/bun
6.7sprocessexec /usr/bin/bun
6.7sprocessexec /sbin/bun
6.7sprocessexec /bin/bun
6.7sprocessexec /app/apps/web/node_modules/.bin/npx
6.7sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/npx
6.7sprocessexec /app/node_modules/.bin/npx
6.7sprocessexec /pnpm/npx
6.7sprocessexec /usr/local/sbin/npx
6.7sprocessexec /usr/local/bin/npx
6.7sprocessexec /app/apps/web/node_modules/.bin/sips
6.7sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/sips
6.7sprocessexec /app/node_modules/.bin/sips
6.7sprocessexec /pnpm/sips
6.7sprocessexec /usr/local/sbin/sips
6.7sprocessexec /usr/local/bin/sips
6.7sprocessexec /usr/sbin/sips
6.7sprocessexec /usr/bin/sips
6.7sprocessexec /sbin/sips
6.7sprocessexec /bin/sips
6.7sprocessexec /app/apps/web/node_modules/.bin/cwebp
6.7sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/cwebp
6.7sprocessexec /app/node_modules/.bin/cwebp
6.7sprocessexec /pnpm/cwebp
6.7sprocessexec /usr/local/sbin/cwebp
6.7sprocessexec /usr/local/bin/cwebp
6.7sprocessexec /usr/sbin/cwebp
6.7sprocessexec /usr/bin/cwebp
6.7sprocessexec /sbin/cwebp
6.7sprocessexec /bin/cwebp
6.7sprocessexec /app/apps/web/node_modules/.bin/magick
6.7sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/magick
6.7sprocessexec /app/node_modules/.bin/magick
6.7sprocessexec /pnpm/magick
6.7sprocessexec /usr/local/sbin/magick
6.7sprocessexec /usr/local/bin/magick
6.7sprocessexec /usr/sbin/magick
6.7sprocessexec /usr/bin/magick
6.7sprocessexec /sbin/magick
6.7sprocessexec /bin/magick
6.7sprocessexec /app/apps/web/node_modules/.bin/convert
6.7sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/convert
6.7sprocessexec /app/node_modules/.bin/convert
6.7sprocessexec /pnpm/convert
6.7sprocessexec /usr/local/sbin/convert
6.7sprocessexec /usr/local/bin/convert
6.7sprocessexec /usr/sbin/convert
6.7sprocessexec /usr/bin/convert
6.7sprocessexec /sbin/convert
6.7sprocessexec /bin/convert
6.8sprocessscript backend runs setup only
6.8sprocessscript backend runs setup only
8.7sprocesssecond launch, clock +45 days, CI unset
11sfilesystemread ~/.npmrc
11sfilesystemread ~/.npm/_logs outside project
11snetworkCONNECT tcp://registry.npmjs.org:443
11sprocessexec /app/apps/web/node_modules/.bin/npm
11sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/npm
11sprocessexec /app/node_modules/.bin/npm
11sprocessexec /pnpm/npm
11sprocessexec /usr/local/sbin/npm
11sprocessexec /usr/local/bin/npm
11sprocessexec /app/apps/web/node_modules/.bin/bun
11sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/bun
11sprocessexec /app/node_modules/.bin/bun
11sprocessexec /pnpm/bun
11sprocessexec /usr/local/sbin/bun
11sprocessexec /usr/local/bin/bun
11sprocessexec /usr/sbin/bun
11sprocessexec /usr/bin/bun
11sprocessexec /sbin/bun
11sprocessexec /bin/bun
11sprocessexec /app/apps/web/node_modules/.bin/npx
11sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/npx
11sprocessexec /app/node_modules/.bin/npx
11sprocessexec /pnpm/npx
11sprocessexec /usr/local/sbin/npx
11sprocessexec /usr/local/bin/npx
11sprocessexec /app/apps/web/node_modules/.bin/sips
11sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/sips
11sprocessexec /app/node_modules/.bin/sips
11sprocessexec /pnpm/sips
11sprocessexec /usr/local/sbin/sips
11sprocessexec /usr/local/bin/sips
11sprocessexec /usr/sbin/sips
11sprocessexec /usr/bin/sips
11sprocessexec /sbin/sips
11sprocessexec /bin/sips
11sprocessexec /app/apps/web/node_modules/.bin/cwebp
11sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/cwebp
11sprocessexec /app/node_modules/.bin/cwebp
11sprocessexec /pnpm/cwebp
11sprocessexec /usr/local/sbin/cwebp
11sprocessexec /usr/local/bin/cwebp
11sprocessexec /usr/sbin/cwebp
11sprocessexec /usr/bin/cwebp
11sprocessexec /sbin/cwebp
11sprocessexec /bin/cwebp
11sprocessexec /app/apps/web/node_modules/.bin/magick
11sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/magick
11sprocessexec /app/node_modules/.bin/magick
11sprocessexec /pnpm/magick
11sprocessexec /usr/local/sbin/magick
11sprocessexec /usr/local/bin/magick
11sprocessexec /usr/sbin/magick
11sprocessexec /usr/bin/magick
11sprocessexec /sbin/magick
11sprocessexec /bin/magick
11sprocessexec /app/apps/web/node_modules/.bin/convert
11sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/convert
11sprocessexec /app/node_modules/.bin/convert
11sprocessexec /pnpm/convert
11sprocessexec /usr/local/sbin/convert
11sprocessexec /usr/local/bin/convert
11sprocessexec /usr/sbin/convert
11sprocessexec /usr/bin/convert
11sprocessexec /sbin/convert
11sprocessexec /bin/convert

Static findings

HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/doctor.mjs:214 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif (!mark("gateway-api-key", hasApiKey, `Need IMAGE_GEN_API_KEY in env or .image-skills/${skillNamespace}/.env`)) {Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/setup.mjs:33 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files1) Optionally writes IMAGE_GEN_API_KEY into the local skill .envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
npx invocation of non-well-known packagepackage.json:16 · npx invocation of non-well-known package — may execute untrusted code"merge-pdf": "npx -y bun scripts/merge-to-pdf.ts",Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/setup.mjs:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconst defaultEnvPath = `${defaultConfigDir}/.env`;Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
npx invocation of non-well-known packagepackage.json:18 · npx invocation of non-well-known package — may execute untrusted code"compress": "npx -y bun ./scripts/vendor/compression-runtime/scripts/main.ts",Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagepackage.json:13 · npx invocation of non-well-known package — may execute untrusted code"scaffold": "npx -y bun scripts/scaffold.ts",Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/setup.mjs:28 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files--scope <target> Where to write the local .env: project or home (default: project)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/main.ts:58 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…eys, then add it to the environment or project .image-skills/${SKILL_NAMESPACE}/.env. IMAGE_GEN_API_KEY is still accepted as a compatibility alias. If you are setti…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
npx invocation of non-well-known packagepackage.json:14 · npx invocation of non-well-known package — may execute untrusted code"build-prompts": "npx -y bun scripts/build-prompts.ts",Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/main.ts:577 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesAlso loaded: <project>/.image-skills/${SKILL_NAMESPACE}/.env and ~/.image-skills/${SKILL_NAMESPACE}/.envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/main.ts:477 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files...(await loadEnvFile(path.join(projectRoot, ".image-skills", SKILL_NAMESPACE, ".env"))),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
npx invocation of non-well-known packagescripts/build-batch.ts:45 · npx invocation of non-well-known package — may execute untrusted codenpx -y bun scripts/build-batch.ts --prompts prompts --output batch.json [--model <model>] [options]Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/main.ts:403 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesreturn existsSync(path.join(baseDir, ".env")) || existsSync(path.join(baseDir, "EXTEND.md"));Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/doctor.mjs:283 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system fileswarnings.push(`IMAGE_GEN_API_KEY was not detected in the environment or project .image-skills/${skillNamespace}/.env`);Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/doctor.mjs:90 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconst projectEnvPath = path.join(projectRoot, ".image-skills", skillNamespace, ".env");Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:33 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…-api-key` when the key is already in env, or persist it to `.image-skills/comic/.env` on the user's behalf, then continue the comic workflow without leaving this sk…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/main.ts:476 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files...(await loadEnvFile(path.join(home, ".image-skills", SKILL_NAMESPACE, ".env"))),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/doctor.mjs:284 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filessuggestions.push(`Provide IMAGE_GEN_API_KEY, then rerun \`npm run setup -- --project . --persist-api-key\` or write .image-skills/${skillNamespace}/.env before using gateway generation`);Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
npx invocation of non-well-known packagepackage.json:15 · npx invocation of non-well-known package — may execute untrusted code"build-batch": "npx -y bun scripts/build-batch.ts",Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/doctor.mjs:216 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filessuggestions.push(`Provide IMAGE_GEN_API_KEY, then rerun \`npm run setup -- --project . --persist-api-key\` or write .image-skills/${skillNamespace}/.env`);Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File type combined with upload actionscripts/vendor/shared-image-generation/scripts/main.ts:1579 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(r.outputPath);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagescripts/scaffold.ts:25 · npx invocation of non-well-known package — may execute untrusted codenpx -y bun scripts/scaffold.ts --output-dir comic/topic-slug --title "Comic Title" [options]Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionscripts/vendor/compression-runtime/scripts/main.ts:58 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`Usage: bun scripts/main.ts <input> [options]Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagescripts/vendor/shared-image-generation/scripts/doctor.mjs:279 · npx invocation of non-well-known package — may execute untrusted codeif (!hasBun && !hasNpx) errors.push("Need Bun or npx so Bun-based workflow scripts can run");Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionscripts/build-prompts.ts:391 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`Prompts written: ${outputDir} (${count} files)`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionscripts/vendor/shared-image-generation/scripts/discover-models.mjs:283 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`Wrote starter registry: ${summary.outputPath}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagescripts/vendor/shared-image-generation/scripts/package.json:7 · npx invocation of non-well-known package — may execute untrusted code"test": "npx -y bun test"Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionscripts/vendor/shared-image-generation/scripts/discover-models.mjs:280 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`Registry already exists (skipped): ${summary.outputPath}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagescripts/package.json:7 · npx invocation of non-well-known package — may execute untrusted code"test": "npx -y bun test"Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionscripts/vendor/shared-image-generation/scripts/build-visual-brief.mjs:294 · File type combined with upload action — agent may exfiltrate local data filesif (outputPath) console.log(`Brief written: ${outputPath}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagescripts/build-prompts.ts:54 · npx invocation of non-well-known package — may execute untrusted codenpx -y bun scripts/build-prompts.ts --storyboard storyboard.md --output-dir prompts [options]Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagescripts/vendor/shared-image-generation/scripts/style-menu.mjs:51 · npx invocation of non-well-known package — may execute untrusted codeconsole.log(" npx -y bun scripts/main.ts \\");Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagescripts/package-delivery.mjs:14 · npx invocation of non-well-known package — may execute untrusted codenpx -y bun scripts/package-delivery.mjs <comic-dir> [options]Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagescripts/vendor/compression-runtime/scripts/package.json:7 · npx invocation of non-well-known package — may execute untrusted code"test": "npx -y bun test"Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionscripts/build-batch.ts:247 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`Batch file written: ${args.outputPath} (${tasks.length} tasks, model: ${resolvedModel.value} via ${resolvedModel.source})`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionscripts/merge-to-pdf.ts:166 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`Created PDF: ${outputPath}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionscripts/scaffold.ts:322 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`Scaffold created in: ${outputDir}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionscripts/vendor/shared-image-generation/scripts/build-visual-brief.mjs:291 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(JSON.stringify({ ...summary, outputPath }, null, 2));Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagescripts/vendor/compression-runtime/package.json:7 · npx invocation of non-well-known package — may execute untrusted code"compress": "npx -y bun scripts/main.ts",Fix: Pin versions and sources; vendor anything fetched at install time.
AST06

Cost to the agent

Instructions loaded
≈4,546 tok
4 files · 62 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

7 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Reads credential files≈ +27 on the totalThe sandbox saw reads under ~/.ssh, ~/.aws, ~/.npmrc, ~/.config or similar. Read only files inside the project, and only the ones the task needs. Seen: ~/.npmrc.
  2. Unclaimed publisher≈ +8 on the totalClaim 632657122: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  3. Touches files outside the project≈ +7 on the totalKeep reads and writes inside the working directory, or declare the exact paths in `filesystem:` and explain why in the README.
  4. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  5. npx invocation of non-well-known package≈ +2 on the totalPin versions and sources; vendor anything fetched at install time.
  6. File type combined with upload action≈ +2 on the totalRemove the call, or declare the host in frontmatter and explain in the README what is sent and why.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim 632657122Propose a patch to the maintainer