Skills/ClawHub/insentek-api-skill

insentek-api-skill@1.2.2

CAUTION· install only

Publisher claims: "通过自然语言查询 insentek（东方智感）物联网设备数据。 支持土壤墒情仪、气象站、见厘液位计等多种设备类型的实时数据、 历史数据、趋势分析、跨设备对比与数据导出。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher xddcode · publishing for 172 daysInstalls 1,113Last detonated 15 min ago
What would fix thisWatchDispute verdict

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-14 and scored it 65/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Privileged sudo command; HTML comment carrying imperative instructions to the agent; Hidden zero-width characters detected. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
Privileged sudo commandSKILL.md:323 · Privileged sudo command — agent may execute with elevated privileges- Fedora: sudo dnf install python3Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
npx invocation of non-well-known packageSKILL.md:53 · npx invocation of non-well-known package — may execute untrusted codenpx @insentek/openapi-skill logout # 清除Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
CRITICAL
HTML comment carrying imperative instructions to the agentSKILL.md:17 · HTML comment carrying imperative instructions to the agentNote: `api_base_url` above is informational only; it is not consumed by any script. To override at runtime, set the INSENTEK_API_BASE environment variable beforFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
MEDIUM
npx invocation of non-well-known packagepackages/insentek-skill-cli/lib/commands/doctor.js:128 · npx invocation of non-well-known package — may execute untrusted code: `Not connected. Run: npx ${PACKAGE_NAME} login`,Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Hidden zero-width characters detectedCLAUDE.md:1 · Hidden zero-width characters detected — may conceal content# insentek-api-skillsFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
MEDIUM
npx invocation of non-well-known packagepackages/insentek-skill-cli/lib/cli.js:426 · npx invocation of non-well-known package — may execute untrusted codeconsole.log(`Quick start:\n npx ${PACKAGE_NAME}\n`);Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagepackages/insentek-skill-cli/lib/core/credentials.js:18 · npx invocation of non-well-known package — may execute untrusted codenpx @insentek/openapi-skill loginFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:63 · npx invocation of non-well-known package — may execute untrusted code| 安装 / 更新 skill | `npx @insentek/openapi-skill` | `install -r openclaw -s workspace -y` |Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagepackages/insentek-skill-cli/lib/core/credentials.js:243 · npx invocation of non-well-known package — may execute untrusted code` npx ${CLI_NAME} auth status`,Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST06
HIGH
Privileged sudo commandSKILL.md:322 · Privileged sudo command — agent may execute with elevated privileges- Ubuntu/Debian: sudo apt install python3 python3-pipFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
npx invocation of non-well-known packagepackages/insentek-skill-cli/lib/core/credentials.js:241 · npx invocation of non-well-known package — may execute untrusted code` npx ${PACKAGE_NAME} login`,Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST06
MEDIUM
npx invocation of non-well-known packagepackages/insentek-skill-cli/lib/core/credentials.js:242 · npx invocation of non-well-known package — may execute untrusted code` npx ${PACKAGE_NAME} logout`,Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:54 · npx invocation of non-well-known package — may execute untrusted codenpx @insentek/openapi-skill auth status # 查看连接状态Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:52 · npx invocation of non-well-known package — may execute untrusted codenpx @insentek/openapi-skill login # 配置（加密保存）Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:64 · npx invocation of non-well-known package — may execute untrusted code| 配置 / 清除凭据 | `npx @insentek/openapi-skill login/logout` | `npx @insentek/openapi-skill login` |Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagescripts/insentek_cli.py:12 · npx invocation of non-well-known package — may execute untrusted codenpx @insentek/openapi-skill auth statusFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagescripts/insentek_cli.py:651 · npx invocation of non-well-known package — may execute untrusted codeauth_p = sub.add_parser("auth", help="查看或清除本地凭据（配置请用 npx @insentek/openapi-skill login）")Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagescripts/insentek_cli.py:177 · npx invocation of non-well-known package — may execute untrusted code"""查看或清除本地凭据。写入/更新凭据请使用 npx @insentek/openapi-skill login。"""Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagescripts/credential_store.py:52 · npx invocation of non-well-known package — may execute untrusted codef"Install it with `pip install cryptography` or run `npx {PACKAGE_NAME} login`."Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST06
MEDIUM
Python subprocess execution detectedscripts/insentek_cli.py:557 · Python subprocess execution detectedsubprocess.run(["curl", "--version"], stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL, check=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
npx invocation of non-well-known packagescripts/credential_store.py:29 · npx invocation of non-well-known package — may execute untrusted codenpx @insentek/openapi-skill loginFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST06
MEDIUM
npx invocation of non-well-known packagescripts/credential_store.py:110 · npx invocation of non-well-known package — may execute untrusted codef"Saving encrypted credentials requires cryptography or `npx {PACKAGE_NAME} login`."Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST06
MEDIUM
npx invocation of non-well-known packagescripts/insentek_cli.py:10 · npx invocation of non-well-known package — may execute untrusted codenpx @insentek/openapi-skill loginFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagescripts/insentek_cli.py:11 · npx invocation of non-well-known package — may execute untrusted codenpx @insentek/openapi-skill logoutFix: Pin versions and sources; vendor anything fetched at install time.
AST06

Cost to the agent

Instructions loaded
≈2,775 tok
2 files · 49 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

15 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Text that tells the agent to ignore its instructions≈ +9 on the totalDelete phrases like "ignore previous instructions", "override", "bypass" from SKILL.md and tool descriptions. Describe what the skill does; do not instruct the agent about other rules.
  2. Unclaimed publisher≈ +8 on the totalClaim xddcode: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  3. Hidden instructions≈ +6 on the totalRemove HTML comments, zero-width characters and white-on-white text that carry instructions. Everything the agent is meant to read should be visible to the person reading the file.
  4. Privileged sudo command≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  5. Hidden zero-width characters detected≈ +4 on the totalKeep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
  6. npx invocation of non-well-known package≈ +2 on the totalPin versions and sources; vendor anything fetched at install time.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim xddcodePropose a patch to the maintainer