Skills/ClawHub/depradar

depradar@2.3.0

CAUTION· static only

Publisher claims: "Dependency breaking-change radar. Use this skill when the user wants to check for breaking changes, outdated dependencies, upgrade risks, or migration issues..." Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher tarun-khatri · publishing for 232 daysInstalls 828Last detonated 21 min ago
What would fix thisWatchDispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-15 and scored it 47/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Slack webhook URL; Access to sensitive file paths; Access to sensitive file paths. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

HIGH
Slack webhook URLscripts/lib/notify.py:22 · Slack webhook URL — data will be sent to Slackslack://https://hooks.slack.com/services/...Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
HIGH
Access to sensitive file pathshooks/scripts/check-config.sh:13 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesGLOBAL_ENV="$HOME/.config/depradar/.env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/depradar.py:715 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesto ~/.config/depradar/.env on confirmation.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Privileged sudo commandSKILL.md:280 · Privileged sudo command — agent may execute with elevated privileges> "Python 3.8+ is required. Install from python.org or via: `brew install python3` (Mac) / `sudo apt install python3` (Linux)."Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathsSKILL.md:295 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- `~/.config/depradar/.env` — global (applies to all projects)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:274 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files> "GitHub API rate limit reached. Add `GITHUB_TOKEN` to `~/.config/depradar/.env` for 5,000 requests/hour. Run `/depradar --diagnose` to check your config."Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:651 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesFix: Add `GITHUB_TOKEN` to `~/.config/depradar/.env`:Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:310 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# ~/.config/depradar/.envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
GitHub token pattern detectedSKILL.md:314 · GitHub token pattern detected — possible hardcoded or harvested tokenGITHUB_TOKEN=ghp_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxFix: Never read or enumerate credential locations; accept a documented environment variable instead.
AST03
HIGH
Access to sensitive file pathsscripts/depradar.py:720 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_file = config_dir / ".env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsCLAUDE.md:25 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filescat > ~/.config/depradar/.env << 'EOF'Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/sync.sh:186 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesGLOBAL_ENV="$HOME/.config/depradar/.env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathshooks/scripts/check-config.sh:53 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesprintf "${YELLOW}[/depradar]${RESET} Tip: Add GITHUB_TOKEN to ~/.config/depradar/.env for 5,000 GitHub API req/hr (currently 60). Run \`/depradar --diagnose\` for setup instructions.\n"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsagents/openai.yaml:78 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_file: ~/.config/depradar/.envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathshooks/scripts/check-config.sh:55 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesprintf "[/depradar] Tip: Add GITHUB_TOKEN to ~/.config/depradar/.env for 5,000 GitHub API req/hr (currently 60). Run '/depradar --diagnose' for setup instructions.\n"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/sync.sh:193 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filescat > ~/.config/depradar/.env << 'EOF'Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:260 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- "Add `GITHUB_TOKEN` to `~/.config/depradar/.env` to get 80x more GitHub API requests and better issue search."Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/lib/render.py:252 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"Add GITHUB_TOKEN to ~/.config/depradar/.env for 5000 req/hr."Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/lib/env.py:6 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files3. ~/.config/depradar/.env (user-global)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/depradar.py:955 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"Add GITHUB_TOKEN to ~/.config/depradar/.env for 5000 req/hr."Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/lib/env.py:29 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files_GLOBAL_CONFIG_FILE = _GLOBAL_CONFIG_DIR / ".env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Python subprocess execution detectedtests/test_smoke.py:32 · Python subprocess execution detectedreturn subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Access to sensitive file pathstests/test_env.py:115 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system fileswith tempfile.NamedTemporaryFile(mode="w", suffix=".env", delete=False) as f:Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Access to sensitive file pathstests/test_env.py:126 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system fileswith tempfile.NamedTemporaryFile(mode="w", suffix=".env", delete=False) as f:Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Access to sensitive file pathstests/test_production_fixes.py:595 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files<!ENTITY xxe SYSTEM "file:///etc/passwd">Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Access to sensitive file pathstests/test_env.py:30 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_file = Path(tmpdir) / ".env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File type combined with upload actionfixtures/github_issues_sample.json:64 · File type combined with upload action — agent may exfiltrate local data files…['stripe-signature'], process.env.WEBHOOK_SECRET);\n handleEvent(event);\n res.json({ received: true });\n});\n\n// v8 (new) — note async handler\napp.post('/webhook', express.raw({ type: 'application/json' }), async (req, res) => {\n …Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File permission modification commandSKILL.md:684 · File permission modification command — agent changes file ownership/permissionschmod +x ~/.claude/skills/depradar-skill/hooks/scripts/check-config.shFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandscripts/sync.sh:167 · File permission modification command — agent changes file ownership/permissionschmod +x "$target/hooks/scripts/check-config.sh"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
Python subprocess execution detectedtests/test_smoke.py:250 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Access to sensitive file pathstests/test_env.py:43 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_file = Path(tmpdir) / ".env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Access to sensitive file pathstests/test_env.py:51 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesnonexistent = Path("/nonexistent/path/that/does/not/exist/.env")Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05

Cost to the agent

Instructions loaded
≈7,415 tok
2 files · 91 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

33 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim tarun-khatri: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Slack webhook URL≈ +4 on the totalRemove the call, or declare the host in frontmatter and explain in the README what is sent and why.
  3. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  4. Privileged sudo command≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  5. GitHub token pattern detected≈ +4 on the totalNever read or enumerate credential locations; accept a documented environment variable instead.
  6. Python subprocess execution detected≈ +2 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim tarun-khatriPropose a patch to the maintainer