long-doc-translation@1.3.18
CAUTIONPublisher claims: "外文长文(德/英/法/日,授权可访问)产出四类交付:主稿 .md、自包含阅读版 .html、逐段备查、新术语总表;存疑交人工不强译。 Do NOT use for: publishing copyrighted text as-is, practice-grade legal output." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry ClawHubPublisher huhoo · joined 2 days agoInstalls 434Last detonated 7 h ago
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
HIGH
npx invocation of non-well-known packageREADME.en.md:46 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
npx invocation of non-well-known packageREADME.md:44 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
Python subprocess execution detectedscripts/check_translation.py:57 · Python subprocess execution detected
AST05HIGH
npx invocation of non-well-known packageCHANGELOG.md:12 · npx invocation of non-well-known package — may execute untrusted code
AST06