Skills/ClawHub/powpow-register-yo

powpow-register-yo@2.2.0

VERIFIED

Publisher claims: "Firanran awọn olumulo lati pari iforukọsilẹ PowPop (Bubble) ati iwọle ẹyọkan ni abala iwiregba gbogbo rẹ. Ajanṣan kun fọọmu fun wọn (pẹlu gbigbe aworan) o si fi koodu ifẹsẹmulẹ imeeli ranṣẹ; olumulo kan n pese alaye ipilẹ ati wo koodu ifẹsẹmulẹ lẹẹkan — ko jade kuro ninu iwiregba. Ni akoko idanwo ọfẹ lọwọlọwọ, akanti ti o forukọsilẹ le lo gbogbo ẹya lẹsẹkẹsẹ; owo sập (Alipay/PayPal) jẹ ilọsi ọmọ-ẹyọn aṣayan, ti ajanṣan le tọju pẹlu pipin iwe ati ibẹwo ọwọn pẹlu. O ṣiṣẹ nigbati olumulo ba sọ "forukọsilẹ fun Bubble", "ṣẹda akanti powpow", "bawo ni mo ṣe le forukọsilẹ fun Bubble", "ran mi lọwọ lati ṣẹda akanti powpow", "forukọsilẹ powpow"; o tun ṣe iṣẹ pẹlu awọn iṣoro iforukọsilẹ (koodu ifẹsẹmulẹ ko gba, orukọ/imeeli ti gba) ati awọn iṣoro imuṣiṣẹ (iwọle sọ "akanti ko ṣiṣẹ" / pending_payment, bawo ni o ṣe le sanwọ/sập, Bubble jẹ ọfẹ tabi owo). O nilo Node ≥ 18; pada si ipo itọsọna pipẹ laifọwọyi nigbati ko ba si. Ko ṣe iṣẹ pẹlu ifiweranṣẹ/ṣẹda ẹda oni-nọmba (iṣẹ powpow-simple ni iyẹn), tabi idagbasoke koodu." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher durenzidu · joined 0 days agoInstalls 559Last detonated 2 h ago
$clawhub install powpow-register-yo
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-27 and scored it 91/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
File type combined with upload actionscripts/powpow-register.mjs:444 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07

No other findings across 1,166 lines in 15 files.