Skills/ClawHub/release-gate-audit

release-gate-audit@1.0.1

VERIFIED· install only

Publisher claims: "发布前放行门禁：判定一个产物能否公开发布。与常规密钥扫描器的根本区别是判定对象——它以 git 已追踪内容 + 全部提交历史构成的「公开面」为准，而不是 ls 看到的工作目录，因此既不会把本地文件误报成泄露，也不会漏掉当前已删除但仍存在于旧 commit 中的凭证。四类威胁分离处置（凭证需吊销 / 雇主内部信息需泛化 / PII 兼可移植性缺陷 / 本地专属产物需停止追踪），并提供整改闭环的机器验证（前后报告对比 + 历史残留核查 + 强制吊销清单），避免『我觉得修好了』。内部词表一律外部注入，工具自身可开源。适用场景：开源仓库首次公开、分享 skill/文章/demo/slide、代码外发、合规审查、发版前放行、以及排查『内部信息是否泄露到公开产物』。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher tencent-adm · publishing for 162 daysInstalls 390Last detonated 6d ago
$clawhub install release-gate-audit
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-08 and scored it 83/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

MEDIUM
Python subprocess execution detectedscripts/release_gate.py:240 · Python subprocess execution detectedr = subprocess.run(["git"] + args, cwd=cwd, capture_output=True,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
AWS access key pattern detectedassets/self-audit-baseline.json:4 · AWS access key pattern detected — possible hardcoded or harvested key"_review_note": "AKIAIOSFODNN7EXAMPLE 为 AWS 官方文档固定示例串；变量插值语法非字面密码；apiKey 单测假值为说明用例；MYCO-/INT- 为词表语法示例；RealPass/10.0.3.14 为虚构教学样例；「司内」「公司内部」为设计原则论述用词。",Fix: Never read or enumerate credential locations; accept a documented environment variable instead.
AST03
HIGH
AWS access key pattern detectedscripts/release_gate.py:463 · AWS access key pattern detected — possible hardcoded or harvested keyprint(" （如 AKIAIOSFODNN7EXAMPLE）、localhost 测试凭证、${VAR} 插值都是常见误报。")Fix: Never read or enumerate credential locations; accept a documented environment variable instead.
AST03
HIGH
Access to sensitive file pathsSKILL.md:289 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files8. **文件名只能降低怀疑度，不能免检。** `.env.example` 里手滑填真值极其常见。Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05

Cost to the agent

Instructions loaded
≈1,856 tok
1 file · 10 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.