Skills/ClawHub/mochi-learning-cards

mochi-learning-cards@1.0.0

VERIFIED

Publisher claims: "Create study cards from supplied source material, retaining source references and separating evidence from inferred answers. Includes local scripts and examples. Free standalone Skill; no MochiLab account required." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher hznetnewpower · joined 1 days agoInstalls 50Last detonated 19 h ago
$npx skills add mochi-learning-cards
Report an issue

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
File type combined with upload actiontests/cards.test.mjs:25 · File type combined with upload action — agent may exfiltrate local data files
AST07

No other findings across 190 lines in 9 files.