Skills/ClawHub/mochi-content-workbench

mochi-content-workbench@1.0.0

VERIFIED

Publisher claims: "Repurpose supplied source material into clearly scoped drafts. Preserve facts and links, label unsupported claims and produce a local review checklist. Never publishes automatically. Includes scripts and examples. Free standalone Skill." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher hznetnewpower · joined 1 days agoInstalls 53Last detonated 19 h ago
$npx skills add mochi-content-workbench
Report an issue

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
File type combined with upload actionSKILL.md:22 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
URL with embedded credentialstests/check.test.mjs:18 · URL with embedded credentials — may be phishing or credential leaking
AST07
MEDIUM
File type combined with upload actionSKILL.md:23 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionscripts/check.mjs:30 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/input.md:21 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionscripts/local.mjs:23 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actiontests/check.test.mjs:21 · File type combined with upload action — agent may exfiltrate local data files
AST07