Skills/ClawHub/pursekeeper-skill-tests

pursekeeper-skill-tests@0.3.12

CAUTION

Publisher claims: "Earn and spend Nano (XNO) with other agents. A directory of services that take Nano over HTTP 402, each verified by a real payment; a wallet that needs only..." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher pursekeeper · joined 2 days agoInstalls 1,183Last detonated 34 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Prompt injectionreferences/sellers.md:26 · Prompt injection — known jailbreak technique reference
AST01
CRITICAL
Access to sensitive file pathsscripts/client-x402.js:88 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/client-x402.js:87 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/client-x402.js:71 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/client-x402.js:70 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Pipe-to-shell patternSKILL.md:109 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06
CRITICAL
Access to sensitive file pathsscripts/client-x402.js:116 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/inference-proxy.js:62 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Outbound HTTP to raw IP addressreferences/inference-proxy.md:27 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
MEDIUM
URL using raw IP addressreferences/inference-proxy.md:27 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
File permission modification commandscripts/client-x402.js:211 · File permission modification command — agent changes file ownership/permissions
AST05
MEDIUM
URL using raw IP addressscripts/inference-proxy.js:526 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addressSKILL.md:161 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
Outbound HTTP to raw IP addressscripts/inference-proxy.js:526 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
CRITICAL
Access to sensitive file pathstest/inference-proxy.js:458 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Outbound HTTP to raw IP addresstest/inference-proxy.js:152 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
File permission modification commandCHANGELOG.md:12 · File permission modification command — agent changes file ownership/permissions
AST05
HIGH
Outbound HTTP to raw IP addresstest/inference-proxy.js:240 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Tunneling service URLreferences/sellers.md:27 · Tunneling service URL — may route traffic to attacker infrastructure
AST07
CRITICAL
Access to sensitive file pathsscripts/no-node.js:17 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Outbound HTTP to raw IP addresstest/index.js:92 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
CRITICAL
Access to sensitive file pathstest/index.js:30 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathstest/inference-proxy.js:127 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Tunneling service URLreferences/sellers.md:47 · Tunneling service URL — may route traffic to attacker infrastructure
AST07
CRITICAL
Access to sensitive file pathsscripts/no-node.js:41 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/inference-proxy.js:63 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Outbound HTTP to raw IP addressscripts/inference-proxy.js:6 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addresstest/index.js:154 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
CRITICAL
Access to sensitive file pathstest/inference-proxy.js:178 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/inference-proxy.js:68 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Outbound HTTP to raw IP addressreferences/inference-proxy.md:166 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
MEDIUM
URL using raw IP addressreferences/inference-proxy.md:33 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
File type combined with upload actionscripts/no-node.js:165 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
Outbound HTTP to raw IP addresstest/inference-proxy.js:19 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
MEDIUM
URL using raw IP addressreferences/inference-proxy.md:211 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
Outbound HTTP to raw IP addressSKILL.md:161 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
CRITICAL
Access to sensitive file pathsscripts/no-node.js:16 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathstest/index.js:17 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
URL using raw IP addressreferences/inference-proxy.md:166 · URL using raw IP address — may bypass domain-based filtering
AST07
CRITICAL
Access to sensitive file pathsscripts/no-node.js:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
URL using raw IP addressSKILL.md:160 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
Outbound HTTP to raw IP addressreferences/inference-proxy.md:33 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
MEDIUM
URL using raw IP addressscripts/inference-proxy.js:6 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
Outbound HTTP to raw IP addresstest/inference-proxy.js:153 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
CRITICAL
Access to sensitive file pathsscripts/inference-proxy.js:65 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
URL using raw IP addresstest/index.js:92 · URL using raw IP address — may bypass domain-based filtering
AST07
CRITICAL
Access to sensitive file pathsscripts/inference-proxy.js:70 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
File type combined with upload actionreferences/buy-from-nanogpt.md:10 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
Outbound HTTP to raw IP addresstest/inference-proxy.js:236 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addressSKILL.md:160 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addressreferences/inference-proxy.md:211 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
MEDIUM
URL using raw IP addresstest/inference-proxy.js:236 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresstest/inference-proxy.js:240 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresstest/inference-proxy.js:153 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresstest/inference-proxy.js:152 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresstest/inference-proxy.js:19 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresstest/index.js:154 · URL using raw IP address — may bypass domain-based filtering
AST07
pursekeeper-skill-tests@0.3.12 — Caution 68/100 — KillerSkills