Skills/ClawHub/mochi-csv-workbench

mochi-csv-workbench@1.0.0

CAUTION

Publisher claims: "Clean and summarize supplied local CSV data with explicit column rules. Produces local outputs and a transformation report; preserves originals. Includes scripts and sample data. Free standalone Skill." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher hznetnewpower · joined 1 days agoInstalls 67Last detonated 17 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

Host or code assembled from base64 fragmentstests/csv.test.mjs:45 · Host or code assembled from base64 fragments

AST07

MEDIUM

File type combined with upload actiontests/csv.test.mjs:45 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actiontests/csv.test.mjs:43 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionSKILL.md:33 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionscripts/csv.mjs:93 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionSKILL.md:16 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionscripts/csv.mjs:120 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actiontests/csv.test.mjs:44 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionSKILL.md:42 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionscripts/csv.mjs:121 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actiontests/csv.test.mjs:46 · File type combined with upload action — agent may exfiltrate local data files

AST07