Skills/ClawHub/editorial-topic-portfolio-skill

editorial-topic-portfolio-skill@1.0.8

CAUTION

Publisher claims: "This skill should be used when evaluating a portfolio of technology, AI, data, cloud, or enterprise-software content topics. It normalizes Notion or Markdown..." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher haiyangchenbj · joined 1 days agoInstalls 1,003Last detonated 21 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Access to sensitive file pathsscripts/notion_topic_adapter.js:4 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
File type combined with upload actionSKILL.md:131 · File type combined with upload action — agent may exfiltrate local data files
AST07
CRITICAL
Access to sensitive file pathsscripts/notion_topic_adapter.js:114 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
File type combined with upload actionSKILL.md:82 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionSKILL.md:166 · File type combined with upload action — agent may exfiltrate local data files
AST07