Skills/ClawHub/peen

peen@0.28.0

CAUTION

Publisher claims: "Configure and operate Peen, the durable coding-agent backend. Use when setting up a provider and Docker workspace, sending work over WebSocket, adding project harness rules, or inspecting and controlling durable sessions." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher psyb0t · joined 2 days agoInstalls 857Last detonated 29 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Pipe-to-shell patternSKILL.md:55 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06
CRITICAL
Access to sensitive file pathsSKILL.md:13 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
URL using raw IP addressreferences/setup.md:37 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
Remote installer piped to shellreferences/setup.md:6 · Remote installer piped to shell
AST07
CRITICAL
Access to sensitive file pathsreferences/setup.md:16 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsSKILL.md:52 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsSKILL.md:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Direct script execution from GitHub raw URLreferences/setup.md:6 · Direct script execution from GitHub raw URL — unverified code source
AST06
CRITICAL
Access to sensitive file pathsSKILL.md:61 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
Remote installer piped to shellSKILL.md:55 · Remote installer piped to shell
AST07
CRITICAL
Access to sensitive file pathsSKILL.md:36 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Direct script execution from GitHub raw URLSKILL.md:55 · Direct script execution from GitHub raw URL — unverified code source
AST06
HIGH
Outbound HTTP to raw IP addressreferences/setup.md:73 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
CRITICAL
Pipe-to-shell patternreferences/setup.md:6 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06
CRITICAL
Access to sensitive file pathsreferences/setup.md:30 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Outbound HTTP to raw IP addressreferences/setup.md:70 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addressreferences/setup.md:37 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
MEDIUM
URL using raw IP addressreferences/setup.md:73 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addressreferences/setup.md:70 · URL using raw IP address — may bypass domain-based filtering
AST07