Skills/ClawHub/mochi-reply-drafts

mochi-reply-drafts@1.0.0

VERIFIED

Publisher claims: "Draft replies from supplied messages and facts, preserving names, amounts and dates. Produces local drafts for review and never sends messages automatically. Includes scripts and examples. Free standalone Skill." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher hznetnewpower · joined 1 days agoInstalls 50Last detonated 19 h ago
$npx skills add mochi-reply-drafts
Report an issue

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
File type combined with upload actionscripts/local.mjs:23 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actiontests/check.test.mjs:21 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/input.md:22 · File type combined with upload action — agent may exfiltrate local data files
AST07