Skills/ClawHub/material-design-3-ui

material-design-3-ui@0.1.0

CAUTION

Publisher claims: "Design, redesign, review, or implement user interfaces using Google Material Design 3 (M3), Material You, and optional Material 3 Expressive principles. Use for UI/UX screens, app flows, design systems, component selection, theming, responsive/adaptive layouts, accessibility audits, Figma-ready specifications, or developer handoff where Material Design 3 is required." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher skydashnet · joined 1 days agoInstalls 32Last detonated 29 h ago
Dispute verdict

Behavior trace

Honeypot run · 2 s · 1 scenarios
t+CategoryObserved action
1.6sfilesystemread ~/.agents/skills/material-design-3-ui/SKILL.md · ~/.agents/skills/material-design-3-ui/references/accessibility.md · ~/.agents/skills/material-design-3-ui/references/adaptive-design.md · ~/.agents/skills/material-design-3-ui/references/anti-patterns.md · ~/.agents/skills/material-design-3-ui/references/color-system.md · ~/.agents/skills/material-design-3-ui/references/component-selection.md outside project
1.6sfilesystemwrote ~/.agents/skills/material-design-3-ui/SKILL.md · ~/.agents/skills/material-design-3-ui/references/accessibility.md · ~/.agents/skills/material-design-3-ui/references/adaptive-design.md · ~/.agents/skills/material-design-3-ui/references/anti-patterns.md · ~/.agents/skills/material-design-3-ui/references/color-system.md · ~/.agents/skills/material-design-3-ui/references/component-selection.md
1.6sprocessexec /usr/bin/uname
1.6sprocessexec /usr/bin/dirname
1.6sprocessexec /usr/bin/basename
1.6sprocessexec /usr/bin/grep
1.6sprocessexec /usr/bin/mkdir
1.6sprocessexec /usr/bin/cp
1.7sprocessscript backend runs setup only
1.7sprocessscript backend runs setup only

Static findings

CRITICAL
Prompt injectionREADME.md:377 · Prompt injection — known jailbreak technique reference
AST01
CRITICAL
Pipe-to-shell patternREADME.md:22 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06
HIGH
Direct script execution from GitHub raw URLREADME.md:22 · Direct script execution from GitHub raw URL — unverified code source
AST06
CRITICAL
HTML comment carrying imperative instructions to the agent.github/PULL_REQUEST_TEMPLATE.md:23 · HTML comment carrying imperative instructions to the agent
AST01
MEDIUM
Remote installer piped to shellREADME.md:22 · Remote installer piped to shell
AST07
HIGH
Authorization escalation languageREADME.md:377 · Authorization escalation language
AST01