Skills/ClawHub/flydb

flydb@1.0.2

VERIFIED· install only

Publisher claims: "Flydb 技能族入口。用户需要 Flydb CLI 安装与迁移、Web 工作台、JSON/Plan 或 MCP 调用、迁移脚本管理、多环境 CI，或排查 FLYDB 错误时，按任务路由到 flydb-cli-release、flydb-migration-scripts、flydb-multi-environment；跨场景按顺序组合。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher zzxcoding · publishing for 62 daysInstalls 568Last detonated 14 h ago
$clawhub install flydb
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-07 and scored it 90/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

MEDIUM
npx invocation of non-well-known packageevals/evals.json:55 · npx invocation of non-well-known package — may execute untrusted code"给出安装命令（npx skills add）",Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:35 · npx invocation of non-well-known package — may execute untrusted codenpx skills add https://github.com/zzxCoding/skills --skill flydb-cli-release # 执行 CLIFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:40 · npx invocation of non-well-known package — may execute untrusted code安装提示（实测）：`npx skills add` 默认交互式选择目标 agent，非交互环境加 `--agent <name> -y`；`--skill` 一次只接受一个技能名（不支持逗号分隔多值），安装全族就逐条执行。Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:34 · npx invocation of non-well-known package — may execute untrusted codenpx skills add https://github.com/zzxCoding/skills --skill flydb # 总入口（本技能）Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:37 · npx invocation of non-well-known package — may execute untrusted codenpx skills add https://github.com/zzxCoding/skills --skill flydb-multi-environment # 多环境与 CIFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:36 · npx invocation of non-well-known package — may execute untrusted codenpx skills add https://github.com/zzxCoding/skills --skill flydb-migration-scripts # 写迁移脚本Fix: Pin versions and sources; vendor anything fetched at install time.
AST06

Cost to the agent

Instructions loaded
≈1,074 tok
1 file · 3 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.