Skills/ClawHub/review-workflow

review-workflow@1.0.1

VERIFIED· install only

Publisher claims: "代码工作流编排助手。将变更背景收集、代码审查、调试修复、提交信息生成、Git 操作串联为完整工作流。 当用户提到"帮我看代码"、"review 一下"、"准备提交"、"生成 commit"、"走一下提交流程"时触发。 依次加载并调用四个子 Skill(基于当前路径)： - references/review-pr..." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher abeautifulsnow · publishing for 131 daysInstalls 608Last detonated 3d ago
$clawhub install review-workflow
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-12 and scored it 82/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

MEDIUM
npx invocation of non-well-known packageSKILL.md:432 · npx invocation of non-well-known package — may execute untrusted code| JS/TS | Jest 内置 | `npx jest --coverage`（或 package.json 含 `collectCoverage:true`） |Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:169 · npx invocation of non-well-known package — may execute untrusted code| JS/TS | Biome | `biome.json` | `npx biome check --apply .` |Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Access to sensitive file pathsSKILL.md:601 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files> 请将其删除或移入环境变量 / `.env` / Secret Manager，并确认加入 `.gitignore`，然后重新执行第 1 步。"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsreferences/git-commit/SKILL.md:83 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files**Never commit secrets** (.env, credentials.json, private keys).Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Python subprocess execution detectedscripts/diff_parse.py:246 · Python subprocess execution detectedproc = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/diff_parse.py:265 · Python subprocess execution detectedproc = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
npx invocation of non-well-known packageSKILL.md:433 · npx invocation of non-well-known package — may execute untrusted code| JS/TS | nyc/Istanbul | `npx nyc <test-cmd>` |Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionSKILL.md:124 · File type combined with upload action — agent may exfiltrate local data files- 获取成功后，将 `review_diff.json`（结构化 diff）和 `review_classified.json`（文件分类结果）合并记录为 `[CODE_INPUT]`。Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07

Cost to the agent

Instructions loaded
≈8,861 tok
5 files · 21 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.