Skills/ClawHub/hidden-camera-scanner

hidden-camera-scanner@1.0.0

VERIFIED

Publisher claims: "局域网/蓝牙反偷拍排查专家。用于扫描当前网络环境、发现疑似隐藏摄像头、监控 NVR 与不明追踪器（AirTag / SmartTag / Tile 等），并生成可读的安全风险报告。触发场景：用户在酒店 / 租房 / 民宿 / 会议室 / 更衣室等场所担心被偷拍；说「帮我看看有没有摄像头 / 扫描一下网络里有没有监控设备 / 检测附近有没有 AirTag 追踪器 / 做个反偷拍检查 / 生成安防风险报告」；或要求调用 arp-scan / nmap / bleak 等工具做设备发现。五阶段法：① Wi-Fi/局域网扫描（arp-scan、nmap，识别 MAC/厂商/开放端口，重点标记海康威视、" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher samjoeyang · joined 1 days agoInstalls 81Last detonated 32 h ago
$clawhub install hidden-camera-scanner
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-02 and scored it 81/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
Privileged sudo commandscripts/platform_check.sh:76 · Privileged sudo command — agent may execute with elevated privilegesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedscripts/wifi_scan.py:74 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/wifi_scan.py:83 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Privileged sudo commandscripts/wifi_scan.sh:94 · Privileged sudo command — agent may execute with elevated privilegesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/platform_check.sh:115 · Privileged sudo command — agent may execute with elevated privilegesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedscripts/wifi_scan.py:69 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/wifi_scan.py:128 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Privileged sudo commandscripts/wifi_survey.py:19 · Privileged sudo command — agent may execute with elevated privilegesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/platform_check.sh:114 · Privileged sudo command — agent may execute with elevated privilegesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedscripts/wifi_survey.py:51 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/wifi_scan.py:95 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05