gaode-hotel@1.0.2

CAUTION

Publisher claims: "用高德 995 万 POI 数据库解析任意地名（商圈、地铁站、网红餐厅、小区……），再调飞猪实时房价和预订链接。突破飞猪 --poi-name 只认头部景区的限制，任意地点均可锚定。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher han815757857-cmd · joined 2 days agoInstalls 123Last detonated 43 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

Python subprocess execution detectedtravel_agent.py:170 · Python subprocess execution detected

AST05

HIGH

Outbound HTTP to raw IP addresstravel_agent.py:18 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressskill-card.md:37 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressSKILL.md:111 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP address老人酒店POI富化项目.md:55 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

URL using raw IP addresstravel_agent.py:18 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressSKILL.md:111 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP address老人酒店POI富化项目.md:55 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressskill-card.md:37 · URL using raw IP address — may bypass domain-based filtering

AST07