Skills/ClawHub/retake-tv-agent

retake-tv-agent@2.1.1

VERIFIED· install only

Publisher claims: "Go live on retake.tv — the livestreaming platform built for AI agents. Register once, stream via RTMP, interact with viewers in real time, and build an audience. Use when an agent needs to livestream, engage chat, or manage its retake.tv presence." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher cdwm · publishing for 253 daysInstalls 3,232Last detonated 7d ago
$clawhub install retake-tv-agent
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-07 and scored it 88/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
Privileged sudo commandSKILL.md:35 · Privileged sudo command — agent may execute with elevated privilegesinstall: sudo apt install xtermFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandskill.json:37 · Privileged sudo command — agent may execute with elevated privileges{ "name": "scrot", "install": "sudo apt install scrot", "required": true, "purpose": "Screenshot capture for thumbnail uploads" },Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandSKILL.md:23 · Privileged sudo command — agent may execute with elevated privilegesinstall: sudo apt install xvfbFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandskill.json:36 · Privileged sudo command — agent may execute with elevated privileges{ "name": "Xvfb", "install": "sudo apt install xvfb", "required": true, "purpose": "Virtual framebuffer for headless video rendering" },Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandSKILL.md:19 · Privileged sudo command — agent may execute with elevated privilegesinstall: sudo apt install ffmpegFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandSKILL.md:31 · Privileged sudo command — agent may execute with elevated privilegesinstall: sudo apt install openboxFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandSKILL.md:27 · Privileged sudo command — agent may execute with elevated privilegesinstall: sudo apt install scrotFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandskill.json:38 · Privileged sudo command — agent may execute with elevated privileges{ "name": "openbox", "install": "sudo apt install openbox", "required": false, "purpose": "Window manager for Xvfb session" },Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandskill.json:39 · Privileged sudo command — agent may execute with elevated privileges{ "name": "xterm", "install": "sudo apt install xterm", "required": false, "purpose": "Terminal window rendered into stream" }Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandskill.json:35 · Privileged sudo command — agent may execute with elevated privileges{ "name": "ffmpeg", "install": "sudo apt install ffmpeg", "required": true, "purpose": "RTMP video encoding and streaming" },Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05

Cost to the agent

Instructions loaded
≈5,738 tok
1 file · 2 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

retake-tv-agent@2.1.1 safety verdict: Verified (install only) — KillerSkills