Skills/ClawHub/in_the_cards_lenormand

in_the_cards_lenormand@3.5.2

CAUTION

Publisher claims: "Interpret Lenormand card readings from freeform spreads or compatible Stargazer’s Oracle prompts, persist each interpretation as structured JSON plus human-readable Markdown, and generate polished A4 PDF, web, social-card, or long-image products. Uses a three-phase workflow: parse → interpret and save → generate. Supports six spread types, combination-first reading, bilingual Chinese/English output, natural-language retrieval, and regeneration of past readings. Triggers on: "牌间 / In the Cards / Stargazer 解读 / 帮我解读这个牌阵 / 雷诺曼解读 / Lenormand reading / Stargazer prompt / 帮我解牌 / 帮我解读 / interpret this spread / 生成解读 PDF / 列出最近的解读 / 把上次的解读 / 生成网页版 / 生成社交卡片 / 上次的解读 / 之前的解读 / 請為我解讀 / 幫我解讀 / 每日運勢 / 今日運勢 / 我想透過 Lenormand / 透過 Lenormand / 二選一 / Lenormand 卡牌占卜 / consult the Lenormand cards / compare them with Lenormand / daily fortune / read my Lenormand / deciding between two options"." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher locoda · joined 3 days agoInstalls 31Last detonated 3d ago
WatchDispute verdict

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-23 and scored it 68/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Rule modification attempt; Rule modification attempt; Rule modification attempt. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Rule modification attemptreferences/template-a4-pdf.md:699 · Rule modification attempt — overwriting existing instructions
AST01
CRITICAL
Rule modification attemptreferences/template-a4-pdf.md:688 · Rule modification attempt — overwriting existing instructions
AST01
CRITICAL
Rule modification attemptreferences/template-a4-pdf.md:680 · Rule modification attempt — overwriting existing instructions
AST01
MEDIUM
File type combined with upload actionSKILL.md:228 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
URL with embedded credentialsassets/seed-web-page.html:171 · URL with embedded credentials — may be phishing or credential leaking
AST07
MEDIUM
File type combined with upload actionscripts/render-social-cards.js:50 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionscripts/render-social-cards.js:45 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionscripts/render-social-cards.js:53 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
URL with embedded credentialsassets/seed-a4-pdf.html:105 · URL with embedded credentials — may be phishing or credential leaking
AST07
MEDIUM
File type combined with upload actionscripts/render-long-image.js:36 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
URL with embedded credentialsassets/seed-social-card.html:172 · URL with embedded credentials — may be phishing or credential leaking
AST07
CRITICAL
Access to sensitive file pathsscripts/chromium-args.js:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
in_the_cards_lenormand@3.5.2 safety verdict: Caution 68/100 — KillerSkills