proactive-living-companion@1.0.51
VERIFIED· install onlyPublisher claims: "" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Install scripts ran; no agent task scenario for this bundle.- Tested
- install scripts, with decoy credentials in place · second launch with the clock 45 days ahead · every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; install scripts ran; no agent task scenario for this bundle) on 2026-11-07 and scored it 83/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 2 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessexec /usr/bin/dirname
0.0sprocessexec /usr/bin/mkdir
0.0sprocessexited 1: mkdir: cannot create directory '/data': Permission denied
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.1sprocesssecond launch, clock +45 days, CI unset
0.1sprocessexec /usr/bin/faketime
0.1sprocessexec /usr/bin/dirname
0.1sprocessexec /usr/bin/mkdir
0.1sprocessexited 1: mkdir: cannot create directory '/data': Permission denied
Static findings
HIGH
Access to sensitive file pathsinstall.sh:54 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05chmod 600 "$TARGET_DIR/.env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.HIGH
Access to sensitive file pathsproaktiv_check.py:25 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05_env_path = os.path.join(os.path.dirname(os.path.abspath(__file__)), ".env")Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.HIGH
Access to sensitive file pathsinstall.sh:55 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05echo " ✅ .env template created — edit $TARGET_DIR/.env and set your chat ID"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.HIGH
Access to sensitive file pathsinstall.sh:48 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05cat > "$TARGET_DIR/.env" << 'ENVEOF'Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.HIGH
Access to sensitive file pathsinstall.sh:47 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05echo " SKIPPED — creating .env template..."Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
File permission modification commandinstall.sh:54 · File permission modification command — agent changes file ownership/permissions
AST05chmod 600 "$TARGET_DIR/.env"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.HIGH
Access to sensitive file pathsproaktiv_check.py:45 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05raise RuntimeError("KRITISCH: OPENCLAW_TELEGRAM_NR nicht gesetzt! Bitte in .env eintragen.")Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
File permission modification commandinstall.sh:84 · File permission modification command — agent changes file ownership/permissions
AST05chmod +x "$TARGET_DIR/feedback_update.py"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.MEDIUM
File permission modification commandinstall.sh:83 · File permission modification command — agent changes file ownership/permissions
AST05chmod +x "$TARGET_DIR/interest_evolve.py"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.MEDIUM
Python subprocess execution detectedproaktiv_check.py:500 · Python subprocess execution detected
AST05subprocess.Popen(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedproaktiv_check.py:199 · Python subprocess execution detected
AST05res = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
File permission modification commandinstall.sh:82 · File permission modification command — agent changes file ownership/permissions
AST05chmod +x "$TARGET_DIR/proaktiv_check.py"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.MEDIUM
Python subprocess execution detectedproaktiv_onboarding.py:29 · Python subprocess execution detected
AST05subprocess.Popen(command, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
File permission modification commandinstall.sh:58 · File permission modification command — agent changes file ownership/permissions
AST05chmod 600 "$TARGET_DIR/.env"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.Cost to the agent
Instructions loaded
≈4,349 tok
10 files · 21 in bundle
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.