cue-omni-ontology@0.3.11

CAUTION

Publisher claims: "从报告和公告中回答业务问题，展开原文查证，加入新资料继续跟踪变化" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher huhoo · joined 2 days agoInstalls 50Last detonated 31 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

MEDIUM

File type combined with upload actionreferences/av-backtest.md:16 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionSKILL.md:84 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionREADME.en.md:137 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionSKILL.en.md:66 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

npx invocation of non-well-known packagescripts/omni_source.py:29 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

URL using raw IP addressscripts/test_ontology.py:158 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

File type combined with upload actionREADME.en.md:70 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

URL using raw IP addressscripts/test_ontology.py:739 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

URL with embedded credentialsscripts/test_ontology.py:158 · URL with embedded credentials — may be phishing or credential leaking

AST07

MEDIUM

File type combined with upload actionreferences/quote-input.md:28 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Outbound HTTP to raw IP addressscripts/test_ontology.py:739 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

File type combined with upload actionSKILL.md:80 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

npx invocation of non-well-known packageREADME.en.md:42 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Python subprocess execution detectedscripts/omni_source.py:47 · Python subprocess execution detected

AST05

HIGH

npx invocation of non-well-known packageREADME.md:42 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressscripts/test_ontology.py:158 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

File type combined with upload actionREADME.md:70 · File type combined with upload action — agent may exfiltrate local data files

AST07