pibox@0.20.2

CAUTION

Publisher claims: "Install, configure, or run pi-coding-agent through the pibox wrapper, or connect to its HTTP, MCP, Telegram, or cron surfaces." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher psyb0t · joined 2 days agoInstalls 1,906Last detonated 31 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

Direct script execution from GitHub raw URLreferences/setup.md:16 · Direct script execution from GitHub raw URL — unverified code source

AST06

HIGH

Outbound HTTP to raw IP addressreferences/setup.md:190 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

CRITICAL

Pipe-to-shell patternreferences/setup.md:16 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

MEDIUM

Remote installer piped to shellreferences/setup.md:16 · Remote installer piped to shell

AST07

MEDIUM

URL using raw IP addressreferences/setup.md:190 · URL using raw IP address — may bypass domain-based filtering

AST07

CRITICAL

Fake instruction boundary tagSKILL.md:92 · Fake instruction boundary tag

AST01