Is personal-assistant@1.1.2 safe to install?

Skills/ClawHub/personal-assistant

personal-assistant@1.1.2

VERIFIED

Publisher claims: "Build a personal market-and-research assistant: watchlist-driven price/mover briefs from keyless data, a video-transcript ideas fetcher, a reading inbox that files summaries with spoken audio, site link-health monitoring, and a private dashboard. Use when the user wants a daily market brief, a personal news digest, "brief me on my stocks", a reading list with summaries, website uptime/link monitoring, or a personal command-center dashboard. Trigger phrases (kept specific to avoid accidental invocation): "set up my market briefs", "track my watchlist", "daily market digest", "monitor my sites", "personal market assistant", "morning market briefing"." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher dronomyio · joined 3 days agoInstalls 501Last detonated 3d ago

$clawhub install personal-assistant

Watch Report an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-27 and scored it 87/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

MEDIUM

File type combined with upload actionSKILL.md:43 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionSKILL.md:109 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionSKILL.md:65 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

Python subprocess execution detectedscripts/content_health_workflow.py:193 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

File type combined with upload actionscripts/content_health_workflow.py:12 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

Python subprocess execution detectedscripts/surveillance_fetch.py:58 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detectedscripts/content_health_workflow.py:229 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05