il-reader@1.2.1
CAUTIONPublisher claims: "AI+信息素养备赛搜题工具。先比对本地题库（1017 题，命中即直接作答），未命中再按证据缺口检索：6 张稳定规则卡、252 个网站入口档案，用 playwright-cli 控制可见 Chrome 取证，输出答案、依据、来源与置信度，并附可人工复查的步骤与网站清单。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry ClawHubPublisher glgeneral15 · joined 1 days agoInstalls 70Last detonated 13 h ago
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.1sprocessscript backend runs setup only
Static findings
HIGH
Outbound HTTP to raw IP addressreferences/discovered-flows.md:19 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
Outbound HTTP to raw IP addressreferences/sites/quiz-sysu-library.json:230 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07MEDIUM
File type combined with upload actionSKILL.md:192 · File type combined with upload action — agent may exfiltrate local data files
AST07MEDIUM
URL using raw IP addressreferences/sites/quiz-sysu-library.json:230 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
URL using raw IP addressreferences/discovered-flows.md:22 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
URL using raw IP addressreferences/sites/quiz-sysu-library.json:136 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
Dense URL-encoded contentreferences/sites/quiz-lawpro-cnki-net.json:21 · Dense URL-encoded content — may be obfuscating payloads
AST07MEDIUM
URL using raw IP addressreferences/discovered-flows.md:25 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
Dense URL-encoded contentreferences/sites/quiz-open-163-com.json:26 · Dense URL-encoded content — may be obfuscating payloads
AST07HIGH
Outbound HTTP to raw IP addressreferences/sites/quiz-sysu-library.json:136 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
Outbound HTTP to raw IP addressreferences/discovered-flows.md:22 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
Outbound HTTP to raw IP addressreferences/discovered-flows.md:25 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
Outbound HTTP to raw IP addressreferences/sites/quiz-sysu-library.json:266 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07MEDIUM
Dense URL-encoded contentreferences/sites/quiz-open-163-com.json:41 · Dense URL-encoded content — may be obfuscating payloads
AST07HIGH
Outbound HTTP to raw IP addressreferences/sites/quiz-sysu-library.json:36 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07MEDIUM
URL using raw IP addressreferences/sites/quiz-sysu-library.json:36 · URL using raw IP address — may bypass domain-based filtering
AST07HIGH
Outbound HTTP to raw IP addressreferences/sites/quiz-sysu-library.json:248 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07MEDIUM
URL using raw IP addressreferences/discovered-flows.md:19 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
Dense URL-encoded contentreferences/sites/jianshu.json:32 · Dense URL-encoded content — may be obfuscating payloads
AST07MEDIUM
Dense URL-encoded contentreferences/sites/pku-core.json:71 · Dense URL-encoded content — may be obfuscating payloads
AST07MEDIUM
URL using raw IP addressreferences/sites/quiz-sysu-library.json:266 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
URL using raw IP addressreferences/sites/quiz-sysu-library.json:248 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
Dense URL-encoded contentreferences/sites/tianyancha.json:31 · Dense URL-encoded content — may be obfuscating payloads
AST07MEDIUM
Dense URL-encoded contentreferences/sites/szu-ai.json:131 · Dense URL-encoded content — may be obfuscating payloads
AST07