kpa-pegasus-setup@2.0.2
VERIFIED· install onlyPublisher claims: "KONKR Pocket ADVANCE（KPA，Android 12 / 960×640）掌机的 Pegasus 天马前端 + RetroArch + PPSSPP 全流程安装、排障与优化。覆盖 metadata / dataCache 缓存、ANDROID 移植游戏收录、竖版游戏方向映射、libretro 核心安装（含 MSX 本地镜像法）、BIOS / 遮罩 / 着色器 / 滤镜、.nomedia 图库隐藏、详情页增强、主题平台条增强、双屏布局、全库健康校验与可逆清理。含 7 步幂等脚本、9 个专项工具与 26 条硬性禁令。触发词：KPA、KONKR Pocket ADVANCE、AYANEO 掌机、天马、Pegasus、RetroArch、竖版方向键反了、核心装不上、掌机优化、模拟器安装、NDS 双屏变形、退出游戏回不到原位、ATOMOSWAVE 雪花、DOS 弹窗。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry ClawHubPublisher lisong2003-lgtm · publishing for 34 daysInstalls 54Last detonated 24 h ago
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-13 and scored it 80/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run
Static findings
HIGH
Destructive file system command detectedscripts/step6_cleanup.sh:24 · Destructive file system command detected
AST05sh "rm -f /sdcard/kpa_step6_device.sh" >/dev/nullFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/kpa_health_check.sh:89 · Destructive file system command detected
AST05rm -f /tmp/kpa_check_dev.shFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/kpa_vertical.sh:39 · Destructive file system command detected
AST05sh "rm -f /sdcard/kpa_vertical_dev.sh" >/dev/nullFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/step4_metadata.sh:109 · Destructive file system command detected
AST05sh "rm -f /sdcard/kpa_step4_device.sh /sdcard/kpa_platform_cores.tsv /sdcard/kpa_mame_orient.json" >/dev/nullFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/kpa_gamedetails.sh:22 · Destructive file system command detected
AST05sh "rm -f /sdcard/pegasus-frontend/dataCache.json" >/dev/nullFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/step5_ppsspp.sh:40 · Destructive file system command detected
AST05rm -f /tmp/kpa_psp_roms.txtFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/kpa_nomedia.sh:26 · Destructive file system command detected
AST05sh "rm -f /sdcard/kpa_nomedia_dev.sh" >/dev/nullFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/step5_ppsspp.sh:34 · Destructive file system command detected
AST05rm -f /tmp/kpa_psp_tmpFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/kpa_vertical.sh:40 · Destructive file system command detected
AST05rm -f /tmp/kpa_vertical_dev.shFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/kpa_android_apps.sh:23 · Destructive file system command detected
AST05sh "rm -f /sdcard/pegasus-frontend/dataCache.json" >/dev/nullFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/bangumi_desc.py:126 · Destructive file system command detected
AST05subprocess.run([adb, "shell", "rm /sdcard/pegasus-frontend/dataCache.json"], check=True)Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/kpa_nomedia.sh:27 · Destructive file system command detected
AST05rm -f /tmp/kpa_nomedia_dev.shFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/step5_ppsspp.sh:69 · Destructive file system command detected
AST05sh "rm -f /sdcard/kpa_step5_device.sh" >/dev/nullFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/kpa_msx_core.sh:33 · Destructive file system command detected
AST05rm -f /tmp/kpa_msx_cfg.shFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/kpa_msx_core.sh:32 · Destructive file system command detected
AST05sh "rm -f /sdcard/kpa_msx_cfg.sh" >/dev/nullFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/kpa_health_check.sh:88 · Destructive file system command detected
AST05sh "rm -f /sdcard/kpa_check_dev.sh /sdcard/kpa_check_paths.txt" >/dev/nullFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/step5_ppsspp.sh:70 · Destructive file system command detected
AST05rm -f /tmp/kpa_step5_device.shFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedSKILL.md:32 · Destructive file system command detected
AST053. **禁止改 metadata / 新增目录后不清 `dataCache.json` 就判断生效** —— 必须 `rm /sdcard/pegasus-frontend/dataCache.json` 再重启天马；缓存会保留已删除游戏。Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/step4_metadata.sh:101 · Destructive file system command detected
AST05rm -f /sdcard/kpa_vertical.txtFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/step6_cleanup.sh:25 · Destructive file system command detected
AST05rm -f /tmp/kpa_step6_device.shFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
Process kill commandscripts/kpa_msx_core.sh:59 · Process kill command — agent can terminate processes
AST05if [ -f "$PIDFILE" ]; then kill "$(cat "$PIDFILE")" 2>/dev/null || true; rm -f "$PIDFILE"; echo "HTTP 服务已关闭"; fiFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
Python subprocess execution detectedscripts/kpa_theme_tweak.py:153 · Python subprocess execution detected
AST05return subprocess.run([ADB] + ["shell", cmd], capture_output=True,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
File permission modification commandscripts/step5_ppsspp.sh:33 · File permission modification command — agent changes file ownership/permissions
AST05sh "chmod 666 '$PPS_FILES/$rom'"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.HIGH
Destructive file system command detectedscripts/sync_from_device.sh:33 · Destructive file system command detected
AST05sh "rm /sdcard/kpa_system.tar"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
Python subprocess execution detectedscripts/bangumi_desc.py:125 · Python subprocess execution detected
AST05subprocess.run([adb, "push", f, f"{tf}/Roms/{plat}/metadata.pegasus.txt"], check=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedscripts/kpa_theme_tweak.py:164 · Python subprocess execution detected
AST05r = subprocess.run([ADB, "push", local, remote], capture_output=True,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedscripts/bangumi_desc.py:126 · Python subprocess execution detected
AST05subprocess.run([adb, "shell", "rm /sdcard/pegasus-frontend/dataCache.json"], check=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
File permission modification commandSKILL.md:111 · File permission modification command — agent changes file ownership/permissions
AST05- **PPSSPP**：targetSdk 35 无 `MANAGE_EXTERNAL_STORAGE`，读不到 TF 卡 ROM，必须把 PSP ROM 拷一份到 app 私有 `files/` 并 chmod 666，**双份均为必需勿删**；RetroArch 无 PPSSPP 核心（加载即崩）。Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.MEDIUM
Python subprocess execution detectedscripts/kpa_theme_tweak.py:158 · Python subprocess execution detected
AST05r = subprocess.run([ADB, "pull", remote, local], capture_output=True,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.HIGH
Destructive file system command detectedscripts/sync_from_device.sh:26 · Destructive file system command detected
AST05sh "rm /sdcard/kpa_config.tar"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.Cost to the agent
Instructions loaded
≈2,748 tok
1 file · 72 in bundle
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.