cue-catalyst-calendar@0.1.27
CAUTIONPublisher claims: "给你持仓列表 + 时间窗，产出按日期排的盯盘日历：每条事件的日期要么已有披露在场且含明确 YYYY-MM-DD，要么 statute 原文推导且适用条件在锚内可判；未披露的推测事件、任何日期算术都进不了表。机检对评级词与褒贬零容忍（词族以机检现值为准，本文所举为常见例）；豁免只有两条口径：类型列整列不扫、官方披露词组按词形豁免。适合：财报季前置、组合盯盘节奏、投研会材料。不适合：涨跌与择时建议、事件影响判断（本件只陈述不判断，也没有留白判断位）。 Do NOT use for: trade timing, impact calls, rumour-sourced events." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry ClawHubPublisher huhoo · joined 2 days agoInstalls 79Last detonated 25 h ago
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
CRITICAL
Access to sensitive file pathsCHANGELOG.md:12 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
npx invocation of non-well-known packageREADME.md:49 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
npx invocation of non-well-known packageSKILL.md:86 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
npx invocation of non-well-known packageCHANGELOG.md:104 · npx invocation of non-well-known package — may execute untrusted code
AST06CRITICAL
Access to sensitive file pathsCHANGELOG.md:21 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
npx invocation of non-well-known packageREADME.en.md:45 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
npx invocation of non-well-known packageREADME.md:30 · npx invocation of non-well-known package — may execute untrusted code
AST06CRITICAL
Access to sensitive file pathsCHANGELOG.md:13 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
npx invocation of non-well-known packageREADME.en.md:28 · npx invocation of non-well-known package — may execute untrusted code
AST06