kpa-pegasus-setup@2.3.2
VERIFIED· install onlyPublisher claims: "KPA 掌机天马/RA/PPSSPP 安装与排障优化；不含 ROM/BIOS。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry ClawHubPublisher lisong2003-lgtm · publishing for 35 daysInstalls 106Last detonated 27 min ago
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-15 and scored it 81/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run
Static findings
HIGH
Destructive file system command detectedscripts/bangumi_desc.py:126 · Destructive file system command detected
AST05subprocess.run([adb, "shell", "rm /sdcard/pegasus-frontend/dataCache.json"], check=True)Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/kpa_health_check.sh:88 · Destructive file system command detected
AST05sh "rm -f /sdcard/kpa_check_dev.sh /sdcard/kpa_check_paths.txt" >/dev/nullFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/kpa_health_check.sh:89 · Destructive file system command detected
AST05rm -f /tmp/kpa_check_dev.shFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/kpa_msx_core.sh:32 · Destructive file system command detected
AST05sh "rm -f /sdcard/kpa_msx_cfg.sh" >/dev/nullFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/kpa_gamedetails.sh:22 · Destructive file system command detected
AST05sh "rm -f /sdcard/pegasus-frontend/dataCache.json" >/dev/nullFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/kpa_msx_core.sh:33 · Destructive file system command detected
AST05rm -f /tmp/kpa_msx_cfg.shFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/kpa_android_apps.sh:23 · Destructive file system command detected
AST05sh "rm -f /sdcard/pegasus-frontend/dataCache.json" >/dev/nullFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/kpa_nomedia.sh:26 · Destructive file system command detected
AST05sh "rm -f /sdcard/kpa_nomedia_dev.sh" >/dev/nullFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
File permission modification commandscripts/step5_ppsspp.sh:35 · File permission modification command — agent changes file ownership/permissions
AST05sh "chmod 666 '$PPS_FILES/$rom'"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.HIGH
Destructive file system command detectedscripts/step4_metadata.sh:109 · Destructive file system command detected
AST05sh "rm -f /sdcard/kpa_step4_device.sh /sdcard/kpa_platform_cores.tsv /sdcard/kpa_mame_orient.json" >/dev/nullFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/sync_from_device.sh:26 · Destructive file system command detected
AST05sh "rm /sdcard/kpa_config.tar"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
Python subprocess execution detectedscripts/kpa_theme_tweak.py:153 · Python subprocess execution detected
AST05return subprocess.run([ADB] + ["shell", cmd], capture_output=True,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.HIGH
Destructive file system command detectedscripts/step6_cleanup.sh:24 · Destructive file system command detected
AST05sh "rm -f /sdcard/kpa_step6_device.sh" >/dev/nullFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/step5_ppsspp.sh:82 · Destructive file system command detected
AST05sh "rm -f /sdcard/pegasus-frontend/dataCache.json"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/kpa_vertical.sh:92 · Destructive file system command detected
AST05rm -f /tmp/kpa_vertical_dev.shFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/step6_cleanup.sh:25 · Destructive file system command detected
AST05rm -f /tmp/kpa_step6_device.shFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/kpa_nomedia.sh:27 · Destructive file system command detected
AST05rm -f /tmp/kpa_nomedia_dev.shFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/kpa_vertical.sh:91 · Destructive file system command detected
AST05sh "rm -f /sdcard/kpa_vertical_dev.sh" >/dev/nullFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/kpa_oneclick.sh:178 · Destructive file system command detected
AST05sh "am force-stop $PEG_PKG; rm -f /sdcard/pegasus-frontend/dataCache.json" >/dev/null 2>&1 || trueFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.LOW
Prompt injectionassets/desc/zh_desc.json:2076 · Prompt injection — known jailbreak technique reference · informational: not an instruction file
AST01"dankuga": "1994 年 Taito 的格斗《Dan-Ku-Ga》，招式硬派，是《Kaiser Knuckle》的改版。",Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.HIGH
Destructive file system command detectedscripts/step4_metadata.sh:101 · Destructive file system command detected
AST05rm -f /sdcard/kpa_vertical.txtFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
Python subprocess execution detectedscripts/bangumi_desc.py:126 · Python subprocess execution detected
AST05subprocess.run([adb, "shell", "rm /sdcard/pegasus-frontend/dataCache.json"], check=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Process kill commandscripts/kpa_msx_core.sh:59 · Process kill command — agent can terminate processes
AST05if [ -f "$PIDFILE" ]; then kill "$(cat "$PIDFILE")" 2>/dev/null || true; rm -f "$PIDFILE"; echo "HTTP 服务已关闭"; fiFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
Python subprocess execution detectedscripts/kpa_theme_tweak.py:158 · Python subprocess execution detected
AST05r = subprocess.run([ADB, "pull", remote, local], capture_output=True,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.HIGH
Destructive file system command detectedscripts/sync_from_device.sh:33 · Destructive file system command detected
AST05sh "rm /sdcard/kpa_system.tar"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
Python subprocess execution detectedscripts/kpa_theme_tweak.py:164 · Python subprocess execution detected
AST05r = subprocess.run([ADB, "push", local, remote], capture_output=True,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedscripts/bangumi_desc.py:125 · Python subprocess execution detected
AST05subprocess.run([adb, "push", f, f"{tf}/Roms/{plat}/metadata.pegasus.txt"], check=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.HIGH
Destructive file system command detectedscripts/step5_ppsspp.sh:42 · Destructive file system command detected
AST05rm -f /tmp/kpa_psp_roms.txtFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/kpa_oneclick.sh:241 · Destructive file system command detected
AST05echo "adb shell 'am force-stop $PEG_PKG; rm -f /sdcard/pegasus-frontend/dataCache.json'"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/step5_ppsspp.sh:36 · Destructive file system command detected
AST05rm -f /tmp/kpa_psp_tmpFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.Cost to the agent
Instructions loaded
≈1,212 tok
1 file · 91 in bundle
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.