Skills/ClawHub/human-writing-skills

human-writing-skills@0.17.1

CAUTION

Publisher claims: "AI text humanizer for de-AI writing, natural rewriting, fiction editing, and novel continuity" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher whh110112 · joined 1 days agoInstalls 1,987Last detonated 33 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.1sprocessscript backend runs setup only

Static findings

HIGH

Outbound HTTP to raw IP addresstests/test_mcp_server.py:425 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Python subprocess execution detectedscripts/verify_dsh_package.py:64 · Python subprocess execution detected

AST05

CRITICAL

Access to sensitive file pathsplugins/deepseek-harness/cordis.patch.yml:7 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

MCP server using network transport (SSE/HTTP)tests/test_mcp_protocol.py:14 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

HIGH

Python subprocess execution detectedscripts/build_skillhub_package.py:54 · Python subprocess execution detected

AST05

MEDIUM

URL using raw IP addresstests/test_mcp_server.py:425 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

File type combined with upload actionplugins/deepseek-harness/README.md:71 · File type combined with upload action — agent may exfiltrate local data files

AST07

CRITICAL

Access to sensitive file pathsplugins/deepseek-harness/adapter.js:85 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

MCP server using network transport (SSE/HTTP)tests/test_mcp_server.py:12 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04