Skills/ClawHub/present

present@1.0.0

CAUTION· install only

Publisher claims: "Authors a narrated presentation and publishes it to a shareable watch URL. Use when asked to make a presentation, slides, a video, a deck, a slideshow, a narrated briefing, or a talk." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher bisque.cloud · publishing for 73 daysInstalls 361Last detonated 7d ago
What would fix thisWatchDispute verdict

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-07 and scored it 71/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Pipe-to-shell pattern; Pipe-to-shell pattern; Pipe-to-shell pattern. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

CRITICAL
Pipe-to-shell patternscripts/present.mjs:1686 · Pipe-to-shell pattern — downloads and immediately executes remote code: " curl -fsSL https://download.bisque.today/bisque-voice/install.sh | sh"),Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
CRITICAL
Pipe-to-shell patternscripts/present.mjs:464 · Pipe-to-shell pattern — downloads and immediately executes remote code: " curl -fsSL https://download.bisque.today/bisque-voice/install.sh | sh"),Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
MEDIUM
File permission modification commandscripts/present.mjs:830 · File permission modification command — agent changes file ownership/permissions` chmod 600 ${CONFIG_PATH}`,Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
Remote installer piped to shellscripts/present.mjs:610 · Remote installer piped to shell"curl -fsSL https://download.bisque.today/bisque-voice/install.sh | sh",Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07
MEDIUM
Remote installer piped to shellscripts/present.mjs:464 · Remote installer piped to shell: " curl -fsSL https://download.bisque.today/bisque-voice/install.sh | sh"),Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07
MEDIUM
Remote installer piped to shellSKILL.md:34 · Remote installer piped to shellcurl -fsSL https://download.bisque.today/bisque-voice/install.sh | sh # macOS, LinuxFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07
CRITICAL
Pipe-to-shell patternscripts/present.mjs:1378 · Pipe-to-shell pattern — downloads and immediately executes remote code: " install: curl -fsSL https://download.bisque.today/bisque-voice/install.sh | sh",Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
CRITICAL
Pipe-to-shell patternscripts/present.mjs:610 · Pipe-to-shell pattern — downloads and immediately executes remote code"curl -fsSL https://download.bisque.today/bisque-voice/install.sh | sh",Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
MEDIUM
Remote installer piped to shellscripts/present.mjs:1378 · Remote installer piped to shell: " install: curl -fsSL https://download.bisque.today/bisque-voice/install.sh | sh",Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07
HIGH
Pipe-to-shell patternSKILL.md:34 · Pipe-to-shell pattern — downloads and immediately executes remote codecurl -fsSL https://download.bisque.today/bisque-voice/install.sh | sh # macOS, LinuxFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
MEDIUM
Remote installer piped to shellscripts/present.mjs:1686 · Remote installer piped to shell: " curl -fsSL https://download.bisque.today/bisque-voice/install.sh | sh"),Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07
MEDIUM
File permission modification commandscripts/present.mjs:1615 · File permission modification command — agent changes file ownership/permissions// which leaves an API key readable by every account on the box. chmodFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
Process kill commandscripts/present.mjs:1590 · Process kill command — agent can terminate processes// A transient 5xx or network blip on one poll must not kill theFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05

Cost to the agent

Instructions loaded
≈3,360 tok
1 file · 3 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

9 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Pipe-to-shell pattern≈ +9 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
  2. Unclaimed publisher≈ +8 on the totalClaim bisque.cloud: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  3. File permission modification command≈ +2 on the totalRequest the narrowest permission that works; replace wildcards with the exact paths or hosts.
  4. Remote installer piped to shell≈ +2 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
  5. Process kill command≈ +2 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim bisque.cloudPropose a patch to the maintainer