Skills/ClawHub/desktop-app-standard

desktop-app-standard@0.9.20

VERIFIED· install only

Publisher claims: "Build, maintain or audit Tauri/Electron desktop apps, including dependencies, packaging, updates and CI. Next.js shell migration uses the corresponding nextjs-to-tauri or nextjs-to-electron Skill. 支持只读巡检，以及明确请求的 .NET SDK/TFM 静态审计；局部修复也检查已采用的建议依赖升级。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher rockbenben · publishing for 48 daysInstalls 158Last detonated 28 min ago
$clawhub install desktop-app-standard
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-15 and scored it 80/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

MEDIUM
File type combined with upload actiontests/cli.test.mjs:164 · File type combined with upload action — agent may exfiltrate local data fileswrite(root, 'package.json', { devDependencies: { electron: '^2.0.0' }, scripts: { postinstall: 'do-not-execute', test: 'do-not-execute' } });Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagetests/cli.test.mjs:502 · npx invocation of non-well-known package — may execute untrusted code…se\non:\n push:\n tags: ["v*"]\njobs:\n build:\n steps:\n # later: npx electron-builder --mac dmg zip\n - run: npx electron-builder --mac dmg --x64\n'); out =…Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Privileged sudo commandtemplates/workflows/ci.yml:35 · Privileged sudo command — agent may execute with elevated privilegessudo apt-get install -y libwebkit2gtk-4.1-dev build-essential curl wget file libxdo-dev libssl-dev libayatana-appindicator3-dev librsvg2-dev patchelf xdg-utilsFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
npx invocation of non-well-known packagetests/cli.test.mjs:145 · npx invocation of non-well-known package — may execute untrusted code' working-directory: apps/a', ' steps:', ' - run: npx electron-builder --mac dmg --publish never',Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagetests/cli.test.mjs:495 · npx invocation of non-well-known package — may execute untrusted codewrite(root, '.github/workflows/release.yml', 'name: release\non:\n push:\n tags: ["v*"]\njobs:\n build:\n steps:\n - run: npx electron-builder --mac dmg --x64\n');Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
Access to sensitive file pathstests/cli.test.mjs:532 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconst wf = (env) => ['name: release', 'on:', ' push:', ' tags: ["v*"]', 'jobs:', ' build:', ' steps:', ' - run: npx electron-builder --mac dmg', ' env:', ...env].join('\n') + '\n';Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
npx invocation of non-well-known packagetests/cli.test.mjs:225 · npx invocation of non-well-known package — may execute untrusted code…: npm test\n - run: npm pkg set version=${GITHUB_REF_NAME#v}\n - run: npx electron-builder --win nsis --mac --linux --publish never\n - run: gh release view v1 || gh…Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagetests/cli.test.mjs:146 · npx invocation of non-well-known package — may execute untrusted code' z:', ' steps:', ' - run: npx electron-builder --mac dmg zip --publish never',Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagetemplates/workflows/release-electron.yml:105 · npx invocation of non-well-known package — may execute untrusted codenpx electron-builder ${{ matrix.args }} --publish neverFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagescripts/ci-traps.mjs:134 · npx invocation of non-well-known package — may execute untrusted codeconst buildsTauri = /tauri-apps\/tauri-action|(?:npm run |npx |yarn |cargo )?tauri build|cargo tauri build/i.test(block);Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Privileged sudo commandtemplates/workflows/release-tauri.yml:58 · Privileged sudo command — agent may execute with elevated privilegessudo apt-get install -y libwebkit2gtk-4.1-dev build-essential curl wget file libxdo-dev libssl-dev libayatana-appindicator3-dev librsvg2-dev patchelf xdg-utilsFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandtemplates/workflows/ci.yml:34 · Privileged sudo command — agent may execute with elevated privilegessudo apt-get updateFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
npx invocation of non-well-known packagescripts/ci-traps.mjs:143 · npx invocation of non-well-known package — may execute untrusted code…m install|bun install/m, t); const pack = find(/electron-builder|electron-forge|npx electron|(?:yarn|pnpm|bun)(?: run)? (?:dist|package|make|electron:build)\b|npm run (?:dist|package|make|elect…Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Privileged sudo commandtemplates/workflows/release-tauri.yml:115 · Privileged sudo command — agent may execute with elevated privilegessudo apt-get updateFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandtemplates/workflows/release-tauri.yml:116 · Privileged sudo command — agent may execute with elevated privilegessudo apt-get install -y libwebkit2gtk-4.1-dev build-essential curl wget file libxdo-dev libssl-dev libayatana-appindicator3-dev librsvg2-dev patchelf xdg-utilsFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandtemplates/workflows/release-tauri.yml:57 · Privileged sudo command — agent may execute with elevated privilegessudo apt-get updateFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
npx invocation of non-well-known packagetests/core.test.mjs:217 · npx invocation of non-well-known package — may execute untrusted codeassert.equal(scan(yml.replace(' - run: npx electron', ' - run: npx install-electron\n - run: npx electron'), { electronMajor: 45 }).includes('electron-runtime-download'), false);Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
Privileged sudo commandtests/core.test.mjs:259 · Privileged sudo command — agent may execute with elevated privilegesconst good = bad.replace(' steps:\n', ' steps:\n - run: sudo apt-get install -y libwebkit2gtk-4.1-dev\n');Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
npx invocation of non-well-known packagetests/core.test.mjs:224 · npx invocation of non-well-known package — may execute untrusted codeconst fixed = yml.replace(' - run: npx electron', ` - run: ${command}\n - run: npx electron`);Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagetests/core.test.mjs:214 · npx invocation of non-well-known package — may execute untrusted codeconst yml = "jobs:\n a:\n steps:\n - run: npm ci\n - run: npx electron-builder --win nsis --publish never\n";Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
Access to sensitive file pathstests/release-assets.test.mjs:162 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconst run = (mode, changes = {}) => spawnSync(process.execPath, [script, mode], {cwd: temporary, encoding: 'utf8', env: {...env, ...changes}});Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File type combined with upload actiontests/cli.test.mjs:374 · File type combined with upload action — agent may exfiltrate local data filesconst input = path.join(root, 'audit.json'), output = path.join(root, 'review.json');Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07

Cost to the agent

Instructions loaded
≈1,317 tok
1 file · 38 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.