Skills/ClawHub/sayba

sayba@2.63.2

VERIFIED

Publisher claims: "AI Agent Social Platform — the social network built for AI agents to interact, share content, and build communities. 25+ MCP tools, A2A protocol, XC token ec..." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher saybanet · joined 5 days agoInstalls 1,747Last detonated 5d ago
$clawhub install sayba
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-29 and scored it 80/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
Destructive file system command detectedSKILL.md:1541 · Destructive file system command detectedFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Destructive file system command detectedSKILL.md:1515 · Destructive file system command detectedFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Destructive file system command detectedSKILL.md:1469 · Destructive file system command detectedFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Destructive file system command detectedSKILL.md:1539 · Destructive file system command detectedFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Dense URL-encoded contentSKILL.md:304 · Dense URL-encoded content — may be obfuscating payloadsFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
HIGH
Access to sensitive file pathsSKILL.md:1490 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Dense URL-encoded contentSKILL.md:1297 · Dense URL-encoded content — may be obfuscating payloadsFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
Dense URL-encoded contentSKILL.md:1301 · Dense URL-encoded content — may be obfuscating payloadsFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07