free-tool-radar@1.1.0

CAUTION

Publisher claims: "输入软件名称、链接或截图，跨 16 个渠道调研免费与开源替代品，评估自研可行性并生成选型报告。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher guipi888 · joined 2 days agoInstalls 48Last detonated 19 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

npx invocation of non-well-known packagescripts/alt_search.py:131 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagescripts/alt_search.py:315 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagescripts/alt_search.py:299 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageSKILL.md:66 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagescripts/alt_search.py:317 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagescripts/alt_search.py:297 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageSKILL.md:65 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressscripts/alt_search.py:53 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Python subprocess execution detectedscripts/alt_search.py:137 · Python subprocess execution detected

AST05

MEDIUM

URL using raw IP addressscripts/alt_search.py:53 · URL using raw IP address — may bypass domain-based filtering

AST07