dlazy-ppt@1.0.24

CAUTION

Publisher claims: "Generate visually unified image-based PPT/PPTX decks from articles, reports, papers, notes, or outlines, using dLazy for every slide image." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher dlazyai · joined 2 days agoInstalls 1,645Last detonated 37 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsdocs/image-generation-cli.md:17 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsSKILL.md:151 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdocs/image-model-configuration.md:69 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/image_gen.py:80 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/dlazy_ppt_runtime.py:49 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

File type combined with upload actiondocs/image-generation-cli.md:31 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionSKILL.md:130 · File type combined with upload action — agent may exfiltrate local data files

AST07

CRITICAL

Access to sensitive file pathsscripts/dlazy_ppt_runtime.py:274 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

File type combined with upload actiondocs/image-generation-cli.md:42 · File type combined with upload action — agent may exfiltrate local data files

AST07

CRITICAL

Access to sensitive file pathsdocs/image-model-configuration.md:64 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Python subprocess execution detectedscripts/dlazy_ppt_runtime.py:179 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedscripts/dlazy_ppt_runtime.py:142 · Python subprocess execution detected

AST05

CRITICAL

Access to sensitive file pathsdocs/image-model-configuration.md:5 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdocs/project-assembly-and-reporting.md:125 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

File type combined with upload actiondocs/slide-generation-and-subagents.md:53 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionscripts/dlazy_client.py:168 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actiondocs/slide-generation-and-subagents.md:55 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actiondocs/slide-generation-and-subagents.md:123 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actiondocs/slide-generation-and-subagents.md:41 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actiondocs/slide-generation-and-subagents.md:17 · File type combined with upload action — agent may exfiltrate local data files

AST07