dikciz-launcher@0.24.0

CAUTION

Publisher claims: "Install a Dikciz Launcher APK with ADB and use its home screen, configuration, HTML widgets, Lua automation, WebSocket and HTTP controls, file transfers, APK installation, and MCP tools on the user's selected Android device." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher psyb0t · joined 2 days agoInstalls 553Last detonated 19 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

Outbound HTTP to raw IP addressreferences/setup.md:36 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

URL using raw IP addressreferences/setup.md:36 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

File type combined with upload actionreferences/setup.md:46 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Process kill commandreferences/capabilities.md:94 · Process kill command — agent can terminate processes

AST05

HIGH

Outbound HTTP to raw IP addressreferences/setup.md:84 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

URL using raw IP addressreferences/setup.md:84 · URL using raw IP address — may bypass domain-based filtering

AST07