Is e2e@1.0.4 safe to install?

e2e@1.0.4

VERIFIED· install only

Publisher claims: "Writes, runs, and debugs end-to-end tests for web and mobile apps with e2e, the agentic test runner, which mixes agent.act goals with exact locator assertions on a Playwright browser or an iOS or Android device. Also drives a project's running app live over the e2e MCP server to look at a screen, check a UI change, take a screenshot or record a video, and try a locator; and runs bug bashes, parallel e2e explore runs with each bug proven by a repro test. Use when a project depends on e2e or has an e2e.config.ts, when asked for end-to-end, browser, mobile, or agentic UI tests, to check a change in the running app, to QA or bug bash an app or branch, or when an e2e run fails." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher e2e · publishing for 10 daysInstalls 104Last detonated 23 h ago

$clawhub install e2e

Watch Report an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.

Tested: every file read, file written and host contacted by what ran
Not tested: use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-13 and scored it 87/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

0.0sprocessno install scripts to re-run

Static findings

MEDIUM

npx invocation of non-well-known packageSKILL.md:10 · npx invocation of non-well-known package — may execute untrusted code- npxFix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packageSKILL.md:29 · npx invocation of non-well-known package — may execute untrusted codetrip. `npx e2e guide <topic>` prints the installed package's version of aFix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packageSKILL.md:132 · npx invocation of non-well-known package — may execute untrusted code`npx e2e run tests/<feature>.e2e.ts:<line>` (over MCP,Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packageSKILL.md:286 · npx invocation of non-well-known package — may execute untrusted code(`npx e2e@latest upgrade`) and check the problem still happens first.Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

LOW

Authorization escalation languagereferences/setup.md:323 · Authorization escalation language · informational: not an instruction filephone needs Xcode with Developer Mode and runner signing, or adb with USBFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01

MEDIUM

npx invocation of non-well-known packageSKILL.md:229 · npx invocation of non-well-known package — may execute untrusted code- Run the CLI as `npx e2e ...` (or `pnpm exec e2e ...`).Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

LOW

Prompt injectionreferences/setup.md:323 · Prompt injection — known jailbreak technique reference · informational: not an instruction filephone needs Xcode with Developer Mode and runner signing, or adb with USBFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

Cost to the agent

Instructions loaded

≈4,447 tok

1 file · 10 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.