gno@1.2.12

CAUTION

Publisher claims: "Search local documents, files, notes, and knowledge bases. Index directories, search with BM25/vector/hybrid, get AI answers with citations. Use when user wants to search files, find documents, query notes, look up information in local folders, index a directory, set up document search, build a knowledge base, needs RAG/semantic search, wants to start a local web UI for their docs, or asks what was said in past coding-agent sessions." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher gmickel · joined 1 days agoInstalls 5,121Last detonated 15 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

Outbound HTTP to raw IP addressSKILL.md:415 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressmcp-reference.md:91 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

URL using raw IP addressSKILL.md:415 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressmcp-reference.md:78 · URL using raw IP address — may bypass domain-based filtering

AST07

CRITICAL

Access to sensitive file pathsmcp-reference.md:66 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

URL using raw IP addressmcp-reference.md:91 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

File type combined with upload actioncli-reference.md:1272 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionexamples.md:552 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Outbound HTTP to raw IP addressmcp-reference.md:78 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07