imagen-search@1.1.2

CAUTION

Publisher claims: "Search Imagen Chat for relevant image URLs, use or download free watermarked images, and obtain temporary original-image links or download originals using an Imagen API key and credits. Supports numbered Markdown references and optional local selection and account setup. Not for image generation or catalog publishing." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher liu-cn · joined 2 days agoInstalls 54Last detonated 23 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.1sprocessexited 2: install.py: error: the following arguments are required: --skills-dir

0.1sprocessscript backend runs setup only

Static findings

MEDIUM

URL using raw IP addressscripts/panel.mjs:60 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressscripts/client.test.mjs:79 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Outbound HTTP to raw IP addressscripts/client.test.mjs:79 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Auto-update or dynamic fetch configurationSKILL.md:20 · Auto-update or dynamic fetch configuration — agent may load new code at runtime

AST06

HIGH

Outbound HTTP to raw IP addressscripts/panel.mjs:60 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

CRITICAL

Prompting user to enter sensitive credentialsSKILL.md:50 · Prompting user to enter sensitive credentials — social engineering

AST03

HIGH

Outbound HTTP to raw IP addressscripts/client.test.mjs:77 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

URL using raw IP addressscripts/client.test.mjs:77 · URL using raw IP address — may bypass domain-based filtering

AST07