Skills/ClawHub/s2-space-agent-os-mothership

s2-space-agent-os-mothership@1.1.3

CAUTION· static only

Publisher claims: "A spatial logic framework for Openclaw. Provides local state compression and coordinate management safely isolated in user space." Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher spacesq · publishing for 235 daysInstalls 1,028Last detonated 26 min ago
What would fix thisWatchDispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-15 and scored it 55/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Hidden zero-width characters detected; Hidden zero-width characters detected; Access to sensitive file paths. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

HIGH
Hidden zero-width characters detecteds2_kernel/rights/s2_family_rights.py:70 · Hidden zero-width characters detected — may conceal contentself.logger.info(f"👨‍👩‍👧‍👦 成员注册成功: {nickname} ({relation})。请强制修改初始密码。")Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
HIGH
Hidden zero-width characters detecteds2_kernel/chronos/s2_garden_manager.py:142 · Hidden zero-width characters detected — may conceal contentprint("\n 👨‍🌾 今日需要您（或园丁）协助照料的室内植物：")Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
LOW
URL to a private-network addresss2_skills/perception/s2_energy_perception.py:44 · URL to a private-network address — a LAN or development target# requests.post(f"http://192.168.1.55/api/relay/off")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Access to sensitive file pathss2_skills/perception/s2-voice-multimodal-aligner.py:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 只有在本地开发缺失系统变量时，才去读取 .env 文件。Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Python subprocess execution detecteds2_skills/perception/s2_fortress_boot.py:17 · Python subprocess execution detectedarp_result = subprocess.check_output(["arp", "-a"], text=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Access to sensitive file pathss2_skills/perception/s2-voice-multimodal-aligner.py:14 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 语音多模态空间时间线对齐引擎 (云原生 .env 优雅降级与 SSRF 防御)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
LOW
System prompt continuationconfig.yaml:5 · System prompt continuation — attempts to append to system instructions · informational: not an instruction filesystem:Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
LOW
URL to a private-network addresss2_skills/scanners/universal_scanner.py:74 · URL to a private-network address — a LAN or development target# 真实部署中: requests.get("http://192.168.1.2:8123/api/states", headers={"Authorization": f"Bearer {ha_token}"})Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07

Cost to the agent

Instructions loaded
≈615 tok
1 file · 65 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

25 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim spacesq: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Hidden zero-width characters detected≈ +4 on the totalKeep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
  3. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  4. New publisher≈ +3 on the totalTime clears this on its own after 14 and 30 days. Claiming the handle (+50) is the fastest way past it.
  5. Python subprocess execution detected≈ +2 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
  6. URL to a private-network address≈ +1 on the totalReplace encoded or assembled strings with plain literals and remove undeclared network calls.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim spacesqPropose a patch to the maintainer