cue-lead-pieces@0.4.31

CAUTION

Publisher claims: "用 Cue Omni Reader 读公司自己的公开披露，找信用恶化线索，每句引文都对回原文和页码" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher huhoo · joined 2 days agoInstalls 70Last detonated 25 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

npx invocation of non-well-known packageCHANGELOG.md:247 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.en.md:35 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageSKILL.md:63 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Python subprocess execution detectedscripts/cue.py:311 · Python subprocess execution detected

AST05

HIGH

npx invocation of non-well-known packageCHANGELOG.md:127 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageSKILL.en.md:52 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:99 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Access to sensitive file pathsCHANGELOG.md:12 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageREADME.md:91 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.en.md:91 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.en.md:99 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Access to sensitive file pathsCHANGELOG.md:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsCHANGELOG.md:20 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageREADME.md:35 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Python subprocess execution detectedscripts/cue.py:83 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedscripts/test_skill_regression.py:137 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedscripts/test_skill_regression.py:135 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedscripts/test_skill_regression.py:43 · Python subprocess execution detected

AST05

HIGH

npx invocation of non-well-known packagescripts/cue.py:306 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Python subprocess execution detectedscripts/test_skill_regression.py:174 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedscripts/test_skill_regression.py:97 · Python subprocess execution detected

AST05

MEDIUM

File type combined with upload actionSKILL.en.md:62 · File type combined with upload action — agent may exfiltrate local data files

AST07