Skills/ClawHub/libtv-cli-skill

libtv-cli-skill@1.0.0

CAUTION· static only

Publisher claims: "LibTV 官方 CLI（libtv）：在命令行里完整操作 / 运行 LibTV 画布。 凡是和 LibTV 画布 / 项目 / 节点 / 模型 / 素材相关的操作，一律通过 libtv CLI 完成， 不要自己捏造 HTTP 请求或绕到网页端步骤。本 skill 内即包含完整的 CLI 命令操作手册； 常见场景见 examples/，安装/更新见 scripts/install.md。" Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher kgm327 · publishing for 106 daysInstalls 524Last detonated 4d ago
What would fix thisWatchDispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-10 and scored it 63/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Executable committed in an agent bundle. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

MEDIUM
File permission modification commandscripts/install-libtv-cli.sh:454 · File permission modification command — agent changes file ownership/permissionschmod +x "$dest"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File type combined with upload actioncommands/project.md:7 · File type combined with upload action — agent may exfiltrate local data files…布UUID>` 换成实际的 `projectUuid`）。 创建、查询远程画布，以及**把当前工作目录绑定到某张画布**（写入 `.libtv/project.json`）。多数子命令（[`libtv node`](./node.md)、[`libtv upload`](./upload.md)、[`libtv group`](./group.md)）在未传 `-p/--project` 时会读取该文件里的 **`projectUuid`**；…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionSKILL.md:16 · File type combined with upload action — agent may exfiltrate local data files…多张画布。 **画布 / 分组范围**：在画布所在工作目录执行 `libtv project use <画布UUID>`，写入 `.libtv/project.json` 的 `projectUuid`；之后大多数子命令（`libtv node` / `libtv upload` / `libtv group`）在省略 `-p` / `--project` 时即使用该画布。需要限定到某个普通分组时，再执行 `libtv group u…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
HIGH
Executable committed in an agent bundlescripts/install-libtv-cli.bat: Windows executable or launcher inside what should be instructions and scriptsinstall-libtv-cli.batFix: Pin versions and sources; vendor anything fetched at install time.
AST06

Cost to the agent

Instructions loaded
≈955 tok
1 file · 45 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

17 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim kgm327: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Executable committed in an agent bundle≈ +4 on the totalPin versions and sources; vendor anything fetched at install time.
  3. File permission modification command≈ +2 on the totalRequest the narrowest permission that works; replace wildcards with the exact paths or hosts.
  4. File type combined with upload action≈ +2 on the totalRemove the call, or declare the host in frontmatter and explain in the README what is sent and why.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim kgm327Propose a patch to the maintainer