Skills/ClawHub/otterkit-tunnel

otterkit-tunnel@1.2.1

VERIFIED· install only

Publisher claims: "Expose a local port to the internet via OtterKit tunnel, or create a webhook endpoint to capture incoming HTTP requests. Give your OpenClaw gateway a public HTTPS URL for incoming webhooks (/hooks/wake, /hooks/agent), capture and replay webhook deliveries, and protect tunnels with HTTP Basic auth. Use when the user asks to "tunnel", "expose", "share my localhost", needs a public URL for a local service or for OpenClaw webhooks, needs a webhook endpoint to capture requests, or wants to re-test a webhook handler against a previously received payload." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher shivamanupadi · publishing for 75 daysInstalls 444Last detonated 7d ago
$clawhub install otterkit-tunnel
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-07 and scored it 87/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

MEDIUM
npx invocation of non-well-known packageSKILL.md:43 · npx invocation of non-well-known package — may execute untrusted codenpx otterkit webhook --subdomain my-claw-hooks --daemon --ttl never \Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:24 · npx invocation of non-well-known package — may execute untrusted codenpx otterkit loginFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:34 · npx invocation of non-well-known package — may execute untrusted codenpx otterkit whoamiFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:56 · npx invocation of non-well-known package — may execute untrusted codenpx otterkit await my-claw-hooks --count 1 --timeout 120s --jsonFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:35 · npx invocation of non-well-known package — may execute untrusted codenpx otterkit balanceFix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Slack webhook URLSKILL.md:147 · Slack webhook URL — data will be sent to Slack--forward https://hooks.slack.com/services/T00/B00/xxxx \Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07

Cost to the agent

Instructions loaded
≈3,012 tok
1 file · 2 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.