Skills/ClawHub/mochi-work-reports

mochi-work-reports@1.0.1

VERIFIED

Publisher claims: "Build daily and weekly work reports from dated work evidence, keeping completed, ongoing and blocked items separate and checking reporting periods and recorded durations. Use for 工作日报与周报." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher hznetnewpower · joined 1 days agoInstalls 67Last detonated 11 h ago
$npx skills add mochi-work-reports
Report an issue

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
File type combined with upload actionreferences/input.md:15 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionSKILL.md:72 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionscripts/store.mjs:54 · File type combined with upload action — agent may exfiltrate local data files
AST07