Is neat@1.3.0 safe to install?

neat@1.3.0

VERIFIED

Publisher claims: "End-of-session knowledge cleanup — reconciles project docs (CLAUDE.md, README, docs/) and agent memory against the code so nothing rots. Trigger on dev-milestone cues: "sync up", "tidy up docs", "update memory", "/neat", "整理文档", "$neat", or stale-docs reports. NOT for non-dev "整理", tidying code, or pasted text." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher vincentjiang06 · joined 1 days agoInstalls 823Last detonated 19 h ago

$clawhub install neat

Watch Report an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-30 and scored it 93/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

Instructs the agent to modify its persistent memory or instruction filesREADME.en.md:13 · Instructs the agent to modify its persistent memory or instruction filesFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01

HIGH

Instructs the agent to modify its persistent memory or instruction filesSKILL.md:65 · Instructs the agent to modify its persistent memory or instruction filesFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01

HIGH

Instructs the agent to modify its persistent memory or instruction filesassets/eval-cases.json:16 · Instructs the agent to modify its persistent memory or instruction filesFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST01

HIGH

Instructs the agent to modify its persistent memory or instruction filesrules/sync-protocol.md:56 · Instructs the agent to modify its persistent memory or instruction filesFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01