reelary@0.1.0

CAUTION

Publisher claims: "Reelary, the 100% local AI media library for your own videos and photos on Mac and Windows: install and connect it, index folders and external drives, check indexing progress, remove folders, fix errors. Use when the reelary_* tools are missing or fail, or the user wants to organize footage. Trigger on "Reelary", "media library", "index my videos", "organize my footage", "catalog my clips", "scan my drive", "make my footage searchable", "video library app", "digital asset management for video", "local video search app". Not for cloud storage or renaming files." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher reelary · joined 0 days agoInstalls 0Last detonated 53 min ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

npx invocation of non-well-known packagereferences/install.md:13 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagereferences/install.md:11 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagereferences/install.md:12 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagereferences/install.md:6 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagereferences/install.md:5 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageSKILL.md:22 · npx invocation of non-well-known package — may execute untrusted code

AST06