Skills/ClawHub/it-ops-toolkit

it-ops-toolkit@0.1.0

CAUTION· install only

Publisher claims: "IT运维工具箱技能。覆盖网络诊断、系统监控、服务检查、监控问题排查、实用工具等核心运维场景。 适合运维工程师、开发人员日常使用。在 WorkBuddy 中通过自然语言触发，由 AI 选择合适的脚本执行并解读结果。 触发场景（包括但不限于）： - 网络/连通性：ping检测、DNS解析、**域名查IP**、HTTP..." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher microsnow · publishing for 153 daysInstalls 529Last detonated 27 h ago
What would fix thisWatchDispute verdict

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-13 and scored it 68/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: OS command execution function call detected; OS command execution function call detected; OS command execution function call detected. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

CRITICAL
OS command execution function call detectedscripts/service_check.py:291 · OS command execution function call detectedos.system("")Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
CRITICAL
OS command execution function call detectedscripts/network_diag.py:416 · OS command execution function call detectedos.system("")Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
CRITICAL
OS command execution function call detectedscripts/sys_monitor.py:749 · OS command execution function call detectedos.system("")Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedscripts/network_diag.py:168 · Python subprocess execution detectedresult = subprocess.run(cmd, capture_output=True, text=True, timeout=10, errors="replace")Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
LOW
URL to a private-network addressscripts/troubleshoot.py:886 · URL to a private-network address — a LAN or development targetprint(" python troubleshoot.py stream --url http://192.168.1.100:8080/live/stream.flv")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Python subprocess execution detectedscripts/sys_monitor.py:416 · Python subprocess execution detectedout = subprocess.check_output('grep -c ^processor /proc/cpuinfo 2>/dev/null || echo 0', shell=True).decode()Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
CRITICAL
OS command execution function call detectedscripts/troubleshoot.py:1859 · OS command execution function call detectedos.system("")Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
CRITICAL
OS command execution function call detectedscripts/utils.py:373 · OS command execution function call detectedos.system("")Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedscripts/network_diag.py:52 · Python subprocess execution detectedresult = subprocess.run(cmd, capture_output=True, text=True, timeout=30)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Destructive file system command detectedscripts/service_check.py:139 · Destructive file system command detectedout, stderr, rc = run(f"docker ps {flag} --format \"{{{{json .}}}}\"")Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedscripts/sys_monitor.py:422 · Python subprocess execution detectedout3 = subprocess.check_output('cat /proc/cpuinfo 2>/dev/null | grep \"model name\" | head -1', shell=True).decode()Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
LOW
URL to a private-network addressscripts/troubleshoot.py:413 · URL to a private-network address — a LAN or development targetprint(" python troubleshoot.py video --url http://192.168.1.100:8080/video")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addressscripts/troubleshoot.py:887 · URL to a private-network address — a LAN or development targetprint(" python troubleshoot.py stream --url http://192.168.1.100:8080/live/stream.m3u8")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Python subprocess execution detectedscripts/service_check.py:42 · Python subprocess execution detectedr = subprocess.run(cmd, capture_output=True, text=True, timeout=timeout,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/sys_monitor.py:418 · Python subprocess execution detectedout2 = subprocess.check_output('top -bn1 | grep \"Cpu(s)\" 2>/dev/null', shell=True).decode()Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Privileged sudo commandscripts/service_check.py:145 · Privileged sudo command — agent may execute with elevated privilegesprint(err("权限不足，请使用 sudo 或将用户加入 docker 组"))Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedscripts/troubleshoot.py:56 · Python subprocess execution detectedr = subprocess.run(cmd, capture_output=True, text=True, timeout=timeout,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/sys_monitor.py:338 · Python subprocess execution detectedr = subprocess.run(ssh_args, capture_output=True, text=True, timeout=timeout)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/sys_monitor.py:66 · Python subprocess execution detectedr = subprocess.run(cmd, capture_output=True, text=True, timeout=timeout,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05

Cost to the agent

Instructions loaded
≈830 tok
1 file · 9 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

12 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. OS command execution function call detected≈ +9 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  2. Unclaimed publisher≈ +8 on the totalClaim microsnow: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  3. Destructive file system command detected≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  4. Privileged sudo command≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  5. Python subprocess execution detected≈ +2 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
  6. URL to a private-network address≈ +1 on the totalReplace encoded or assembled strings with plain literals and remove undeclared network calls.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim microsnowPropose a patch to the maintainer