Skills/ClawHub/qdrant-db

qdrant-db@1.0.2

VERIFIED· install only

Publisher claims: "Search and manage a Qdrant vector knowledge base via local CLI helper" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher zhlhlf · publishing for 72 daysInstalls 420Last detonated 7d ago
$clawhub install qdrant-db
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-07 and scored it 84/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
Access to sensitive file pathsscripts/kb.py:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 代码不内置默认值：配置统一从 真实环境变量 > .env 读取，模板见 env.exampleFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/kb.py:20 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesENV_FILE = Path(__file__).resolve().parent.parent / ".env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:88 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files所有配置统一从环境变量读取；`.env` 为 shell 风格 `KEY=VALUE`（支持 `export` 前缀、单/双引号、`#` 注释、空行，不支持变量展开）。Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:90 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files统一配置文件 `<skill根目录>/.env`（与 kb.py 同随 skill 走，权限 600）；目录下附脱敏模板 `env.example`，复制即可开始：Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File permission modification commandSKILL.md:93 · File permission modification command — agent changes file ownership/permissionscp env.example .env && chmod 600 .envFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
HIGH
Access to sensitive file pathsscripts/kb.py:18 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 配置文件随 skill 走：<skill根>/.env（scripts/ 的上一级），shell 风格 KEY=VALUEFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
LOW
URL to a private-network addressSKILL.md:98 · URL to a private-network address — a LAN or development targetQDRANT_URL=http://172.26.25.136:6333Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Access to sensitive file pathsscripts/kb.py:65 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files2. <skill根>/.envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
LOW
URL to a private-network addressSKILL.md:98 · URL to a private-network address — a LAN or development targetQDRANT_URL=http://172.26.25.136:6333Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Access to sensitive file pathsSKILL.md:86 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files配置来源优先级：**真实环境变量 > `<skill根>/.env`**（代码不内置默认值；缺必填项会报错，按 `env.example` 补全 `.env` 即可）Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:12 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files示例配置（代码不内置默认值，模板见 `env.example`；本机 `.env` 当前指向内网 Qdrant `172.26.25.136`）：Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/kb.py:28 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"""解析 shell 风格 .env：KEY=VALUE、export 前缀、单/双引号、# 注释、空行。Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05

Cost to the agent

Instructions loaded
≈914 tok
1 file · 4 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.