Skills/ClawHub/powpow-register-sw

powpow-register-sw@2.2.0

VERIFIED

Publisher claims: "Husaidia watumiaji kukamilisha usajili wa PowPow (Bubble) na kuingia kwa bonyezo moja ndani ya mazungumzo yote. Wakala hujaza fomu kwa niaba yao (ikiwa ni pamoja na kupakia picha ya wasifu) na hutuma msimbo wa uthibitishaji wa barua pepe; mtumiaji hutoa tu taarifa za msingi na kukagua msimbo wa uthibitishaji mara moja — haachi mazungumzo kabisa. Katika kipindi cha sasa cha majaribio bila malipo cha jukwaa, akaunti iliyosajiliwa inaweza kutumia kila kipengele mara moja; malipo ya sasiri (Alipay/PayPal) ni uboreshaji wa hiari wa uanachama, ambao wakala anaweza pia kuyashughulikia kwa kuunda oda na kufuatilia mapato inapohitajika. Huchochea wakati mtumiaji anasema "jiandikishe kwa Bubble", "fungua akaunti ya powpow", "nawezaje kujiandikisha kwa Bubble", "nisaidie kufungua akaunti ya powpow", "jiandikishe powpow"; pia hushughulikia matatizo ya usajili (msimbo wa uthibitishaji haujapokelewa, jina la mtumiaji/barua pepe tayari yamechukuliwa) na matatizo ya uamshaji (kuingia kunasema "akaunti haijawashwa" / pending_payment, nawezaje kusajili/kulipa, Bubble ni bila malipo au inagharimu). Inahitaji Node ≥ 18; hurejea kiotomatiki kwenye hali ya mwongozo safi inapopatikana. Haifanyi kazi za kuchapisha/kuunda binadamu wa digitali (ni kazi ya powpow-simple), wala maendeleo ya msimbo." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher durenzidu · joined 0 days agoInstalls 544Last detonated 2 h ago
$clawhub install powpow-register-sw
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-27 and scored it 91/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
File type combined with upload actionscripts/powpow-register.mjs:444 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07

No other findings across 1,163 lines in 15 files.