Skills/ClawHub/cue-event-risk-scan

cue-event-risk-scan@0.2.22

CAUTION

Publisher claims: "企业风险一键扫描（数据腿实测版）：给你公司名或代码，产出一页扫描卡——行政处罚与监管措施逐条（带决定文书号/日期/机关）、对外担保要点、全球制裁执法面（涉跨境主体时）；每条挂官方出处，检索未达的面**明写未达不补空白**。适合「这家公司有什么处罚」「对外担保扫一遍」「出海实体制裁风险查查」等场景。Do NOT use for: 整体风险评级或违约概率、涉诉与股权链推断（通道当前未达，本件不装）、投资建议。Triggers: 企业风险扫描 / 处罚记录 / 监管措施 / 对外担保 / 制裁筛查； company risk scan / penalty check" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher huhoo · joined 2 days agoInstalls 61Last detonated 31 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Access to sensitive file pathsCHANGELOG.md:23 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsCHANGELOG.md:14 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageCHANGELOG.md:112 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.en.md:76 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.en.md:75 · npx invocation of non-well-known package — may execute untrusted code
AST06
CRITICAL
Access to sensitive file pathsCHANGELOG.md:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageREADME.en.md:107 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:107 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:75 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:76 · npx invocation of non-well-known package — may execute untrusted code
AST06