Skills/ClawHub/epo-patent-intelligence

epo-patent-intelligence@1.0.0

CAUTION· static only

Publisher claims: "EPO Patent Intelligence monitors EPO patents, analyzes competitor threats, identifies tech trends, and generates strategic HTML reports for informed business..." Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher quratus · publishing for 269 daysInstalls 974Last detonated 13 min ago
What would fix thisWatchDispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-15 and scored it 58/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Access to sensitive file paths; Access to sensitive file paths; Access to sensitive file paths. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

HIGH
Access to sensitive file pathsSKILL.md:65 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filessource .envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/verify_documentation.sh:105 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# Check .env fileFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/setup_cron.sh:83 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesecho "✅ .env file found"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/debug_epo_response.py:16 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesload_dotenv('/root/.openclaw/workspace/skills/epo-patent-intelligence/.env')Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:20 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files1. **Ensure EPO credentials are configured** in `.env` file:Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsdebug_epo_structure.py:13 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_path = '/root/.openclaw/workspace/skills/epo-patent-intelligence/.env'Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/test_cron_execution.sh:55 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesecho " ✅ .env permissions secure (600)" | tee -a "$TEST_LOG"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File permission modification commandscripts/setup_cron.sh:71 · File permission modification command — agent changes file ownership/permissionschmod +x "$SKILL_DIR/scripts/weekly_automation_enhanced.sh"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
HIGH
Access to sensitive file pathsSKILL.md:27 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filessource .envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/setup_cron.sh:82 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif [ -f "$SKILL_DIR/.env" ]; thenFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/verify_documentation.sh:111 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesecho " ⚠️ .env: Insecure permissions ($perms), should be 600" | tee -a "$VERIFICATION_LOG"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/verify_documentation.sh:109 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesecho " ✅ .env: Configuration file (secure permissions: $perms)" | tee -a "$VERIFICATION_LOG"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/verify_documentation.sh:107 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesperms=$(stat -c "%a" .env)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/setup_cron.sh:86 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif grep -q "EPO_CONSUMER_KEY" "$SKILL_DIR/.env" && grep -q "EPO_SECRET_KEY" "$SKILL_DIR/.env"; thenFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File permission modification commandscripts/test_cron_execution.sh:58 · File permission modification command — agent changes file ownership/permissionschmod 600 .envFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
HIGH
Access to sensitive file pathsscripts/weekly_automation_enhanced.sh:29 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif [ -f "$SKILL_DIR/.env" ]; thenFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/weekly_automation.sh:29 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filessource "$SKILL_DIR/.env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/test_cron_execution.sh:50 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesecho " ✅ .env file found" | tee -a "$TEST_LOG"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/weekly_automation.sh:32 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system fileslog "❌ ERROR: .env file not found"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:58 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filescat .envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/verify_documentation.sh:106 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif [ -f ".env" ]; thenFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/test_cron_execution.sh:49 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif [ -f ".env" ]; thenFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File permission modification commandscripts/setup_cron.sh:99 · File permission modification command — agent changes file ownership/permissionschmod 600 "$SKILL_DIR/.env"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
Process kill commandscripts/test_health_monitor_failures.sh:74 · Process kill command — agent can terminate processeskill $(ps aux | grep "python3.*8080" | grep -v grep | awk '{print $2}') 2>/dev/null || trueFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Process kill commandscripts/test_health_monitor_failures.sh:26 · Process kill command — agent can terminate processeskill $HTTP_PIDFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Cipher/encoding referencereferences/DASHBOARD_FRAMEWORKS.md:1235 · Cipher/encoding reference — may contain obfuscated instructions- **Cipher:** https://cipher.ai/ (patent analytics)Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST01
HIGH
Access to sensitive file pathsupdate_patent_ids.py:14 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_path = '/root/.openclaw/workspace/skills/epo-patent-intelligence/.env'Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsrefetch_patents.py:14 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_path = '/root/.openclaw/workspace/skills/epo-patent-intelligence/.env'Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/test_cron_execution.sh:53 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesPERMS=$(stat -c "%a" .env)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/test_cron_execution.sh:46 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# Check .env fileFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/weekly_automation_enhanced.sh:30 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filessource "$SKILL_DIR/.env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/weekly_automation_enhanced.sh:33 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system fileslog "❌ ERROR: .env file not found"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/weekly_automation.sh:28 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif [ -f "$SKILL_DIR/.env" ]; thenFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Process kill commandscripts/start_cloudflare_tunnel.sh:47 · Process kill command — agent can terminate processesecho "📝 To stop: kill $SERVER_PID $TUNNEL_PID"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
File permission modification commandscripts/rotate_weekly.sh:84 · File permission modification command — agent changes file ownership/permissionschmod +x "$RESTART_SCRIPT"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandscripts/test_cron_execution.sh:38 · File permission modification command — agent changes file ownership/permissionschmod +x "./scripts/weekly_automation_enhanced.sh"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
HIGH
Access to sensitive file pathsscripts/setup_cron.sh:79 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# Test the .env fileFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:57 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# Ensure .env file exists with EPO credentialsFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Access to sensitive file pathstest_fixed_mapper.py:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_path = '/root/.openclaw/workspace/skills/epo-patent-intelligence/.env'Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File permission modification commandscripts/verify_documentation.sh:112 · File permission modification command — agent changes file ownership/permissionschmod 600 .envFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
LOW
System prompt continuationreferences/AGENT_INTEGRATION.md:157 · System prompt continuation — attempts to append to system instructions · informational: not an instruction fileINSTRUCTIONS:Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
MEDIUM
File permission modification commandscripts/verify_documentation.sh:77 · File permission modification command — agent changes file ownership/permissionschmod +x "$script"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05

Cost to the agent

Instructions loaded
≈2,988 tok
1 file · 73 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

22 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim quratus: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  3. File permission modification command≈ +2 on the totalRequest the narrowest permission that works; replace wildcards with the exact paths or hosts.
  4. Process kill command≈ +2 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim quratusPropose a patch to the maintainer