k8s-helm@2.0.0

CAUTION

Publisher claims: "Manage Helm charts, releases, and repositories. Use for Helm installations, upgrades, rollbacks, chart development, and release management." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher rohitg00 · joined 1 days agoInstalls 0Last detonated 13 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

MEDIUM

Remote installer piped to shellSKILL.md:291 · Remote installer piped to shell

AST07

HIGH

Outbound HTTP to raw IP addressreferences/CHART-STRUCTURE.md:302 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

CRITICAL

Pipe-to-shell patternSKILL.md:291 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

MEDIUM

File type combined with upload actionreferences/CHART-STRUCTURE.md:17 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

URL using raw IP addressreferences/CHART-STRUCTURE.md:302 · URL using raw IP address — may bypass domain-based filtering

AST07