Skills/ClawHub/mochi-document-reader

mochi-document-reader@1.0.1

VERIFIED

Publisher claims: "Read supplied notices, policies and text documents; locate deadlines and requirements, compare clauses, and answer with file-line or extracted-page citations. Use for 文件阅读与重点问答." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher hznetnewpower · joined 1 days agoInstalls 67Last detonated 11 h ago
$npx skills add mochi-document-reader
Report an issue

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
File type combined with upload actionscripts/store.mjs:54 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionSKILL.md:39 · File type combined with upload action — agent may exfiltrate local data files
AST07