slide-maker@6.0.0

CAUTION

Publisher claims: "Best PPT skill (https://github.com/addsumtech/slides_maker)" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher dong845 · joined 1 days agoInstalls 687Last detonated 19 h ago

Dispute verdict

Behavior trace

Honeypot run · 1 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

0.1sprocessscript backend runs setup only

Static findings

CRITICAL

Destructive file system command detectedscripts/check_register_pixels.py:70 · Destructive file system command detected

AST05

CRITICAL

Privileged sudo commandscripts/check_env.py:269 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Privileged sudo commandreferences/troubleshooting-faq.md:68 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Privileged sudo commandscripts/check_env.py:262 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Privileged sudo commandscripts/check_env.py:145 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Destructive file system command detectedscripts/check_register_pixels.py:175 · Destructive file system command detected

AST05

CRITICAL

HTML comment carrying imperative instructions to the agentscripts/derive_template_contract.py:259 · HTML comment carrying imperative instructions to the agent

AST01

CRITICAL

Privileged sudo commandscripts/check_env.py:139 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Privileged sudo commandreferences/troubleshooting-faq.md:67 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Privileged sudo commandscripts/check_env.py:99 · Privileged sudo command — agent may execute with elevated privileges

AST05

HIGH

npx invocation of non-well-known packagescripts/check_version.py:20 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Destructive file system command detectedscripts/vl_langs/bricks.py:74 · Destructive file system command detected

AST05

HIGH

npx invocation of non-well-known package.skill-lossless-allow.json:74 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Refusal suppressionSKILL.md:2585 · Refusal suppression — attempting to prevent safety responses

AST01

HIGH

Process kill commandscripts/check_reference_code.py:222 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/arc_divergence.py:15 · Process kill command — agent can terminate processes

AST05

HIGH

npx invocation of non-well-known packageSKILL.md:2029 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagereferences/file-inventory.md:402 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageSKILL.md:427 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Process kill commandscripts/check_env.py:295 · Process kill command — agent can terminate processes

AST05

HIGH

document.cookie accessscripts/archetypes_html.py:97 · document.cookie access — can steal session cookies

AST07

HIGH

Process kill commandagents/content-planner.md:673 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/assemble.py:132 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/check_param_reach.py:156 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandreferences/multilingual.md:12 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/check_design_contracts.py:374 · Process kill command — agent can terminate processes

AST05

HIGH

Python subprocess execution detectedscripts/check_version.py:131 · Python subprocess execution detected

AST05

HIGH

Process kill commandreferences/multilingual.md:260 · Process kill command — agent can terminate processes

AST05

CRITICAL

Privileged sudo commandscripts/render_deck.py:4587 · Privileged sudo command — agent may execute with elevated privileges

AST05

HIGH

Python subprocess execution detectedscripts/check_skill_lossless.py:101 · Python subprocess execution detected

AST05

HIGH

Process kill commandscripts/check_image_provenance.py:455 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/archetypes_html.py:984 · Process kill command — agent can terminate processes

AST05

HIGH

npx invocation of non-well-known package.skill-lossless-allow.json:73 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Process kill commandSKILL.md:2076 · Process kill command — agent can terminate processes

AST05

HIGH

npx invocation of non-well-known packagescripts/check_version.py:23 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Python subprocess execution detectedscripts/check_env.py:118 · Python subprocess execution detected

AST05

HIGH

npx invocation of non-well-known packagescripts/check_version.py:100 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageSKILL.md:397 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Process kill commandscripts/arc_divergence.py:434 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/check_register_pixels.py:704 · Process kill command — agent can terminate processes

AST05

HIGH

npx invocation of non-well-known packageSKILL.md:396 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Process kill commandscripts/check_skill_lossless.py:256 · Process kill command — agent can terminate processes

AST05

CRITICAL

Destructive file system command detectedscripts/lint_deck.py:323 · Destructive file system command detected

AST05

HIGH

Process kill commandscripts/check_style_applied.py:285 · Process kill command — agent can terminate processes

AST05

CRITICAL

Destructive file system command detectedscripts/palette_audit.py:268 · Destructive file system command detected

AST05

HIGH

Process kill commandscripts/codex_visual_contract.py:305 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/codex_delivery_gate.py:2943 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/image_prompts.py:186 · Process kill command — agent can terminate processes

AST05

HIGH

Python subprocess execution detectedscripts/ingest.py:248 · Python subprocess execution detected

AST05

HIGH

Process kill commandscripts/generate_images_codex.py:782 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/fanout_record.py:201 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/extract_deck.py:192 · Process kill command — agent can terminate processes

AST05

HIGH

Python subprocess execution detectedscripts/codex_delivery_gate.py:2320 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedscripts/generate_images_codex.py:414 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedscripts/icons.py:391 · Python subprocess execution detected

AST05

HIGH

npx invocation of non-well-known packagescripts/check_version.py:153 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Process kill commandscripts/image_qc.py:666 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/deck_gates.py:796 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/export_notes.py:72 · Process kill command — agent can terminate processes

AST05

HIGH

Python subprocess execution detectedscripts/ingest.py:224 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedscripts/deck_cycle.py:252 · Python subprocess execution detected

AST05

HIGH

npx invocation of non-well-known packagescripts/check_version.py:175 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Python subprocess execution detectedscripts/icons.py:370 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedscripts/ingest.py:260 · Python subprocess execution detected

AST05

HIGH

Process kill commandscripts/component_audit.py:401 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/contact_sheet.py:102 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/formats.py:285 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/dispatch_brief.py:254 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/fetch_images.py:863 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/directions_diversity.py:375 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/deck_cycle.py:407 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/codex_handoff_guard.py:59 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/extract_pdf.py:1180 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/smoke_directions.py:347 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/registry.py:195 · Process kill command — agent can terminate processes

AST05

HIGH

npx invocation of non-well-known packagescripts/skill_fingerprint.py:18 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Process kill commandscripts/registry.py:100 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/install_skill.py:243 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/roundtrip_report.py:162 · Process kill command — agent can terminate processes

AST05

HIGH

Python subprocess execution detectedscripts/smoke_directions.py:83 · Python subprocess execution detected

AST05

HIGH

Process kill commandscripts/slide_index.py:119 · Process kill command — agent can terminate processes

AST05

HIGH

npx invocation of non-well-known packagescripts/install_skill.py:10 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagescripts/install_skill.py:32 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagescripts/install_skill.py:31 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Python subprocess execution detectedscripts/smoke_directions.py:71 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedscripts/render_deck.py:1238 · Python subprocess execution detected

AST05

HIGH

npx invocation of non-well-known packagescripts/install_skill.py:33 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Python subprocess execution detectedscripts/render_deck.py:1147 · Python subprocess execution detected

AST05

HIGH

npx invocation of non-well-known packagescripts/preflight_check.py:413 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Process kill commandscripts/roundtrip_budget.py:240 · Process kill command — agent can terminate processes

AST05

HIGH

npx invocation of non-well-known packagescripts/install_skill.py:74 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Process kill commandscripts/palette_audit.py:315 · Process kill command — agent can terminate processes

AST05

HIGH

Python subprocess execution detectedscripts/smoke_deckkit.py:661 · Python subprocess execution detected

AST05

HIGH

Process kill commandscripts/ingest.py:349 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/render_deck.py:5052 · Process kill command — agent can terminate processes

AST05

HIGH

Python subprocess execution detectedscripts/render_deck.py:1200 · Python subprocess execution detected

AST05

HIGH

Process kill commandscripts/preflight_check.py:756 · Process kill command — agent can terminate processes

AST05

HIGH

Python subprocess execution detectedscripts/ingest.py:292 · Python subprocess execution detected

AST05

HIGH

Process kill commandscripts/run_eval.py:364 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/plan_wordcount.py:73 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/smoke_deckkit.py:18 · Process kill command — agent can terminate processes

AST05

HIGH

Python subprocess execution detectedscripts/run_eval.py:188 · Python subprocess execution detected

AST05

HIGH

Process kill commandscripts/sigs.py:1099 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/smoke_directions.py:100 · Process kill command — agent can terminate processes

AST05

HIGH

Unicode escape sequence detectedscripts/save_register.py:70 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

HIGH

Process kill commandscripts/lint_deck.py:4298 · Process kill command — agent can terminate processes

AST05

HIGH

Python subprocess execution detectedscripts/vl_library_export.py:250 · Python subprocess execution detected

AST05

HIGH

Process kill commandscripts/validate_review.py:865 · Process kill command — agent can terminate processes

AST05

MEDIUM

URL with suspicious TLDscripts/vl_docs.py:79 · URL with suspicious TLD — commonly used for phishing/malware

AST07

MEDIUM

File type combined with upload actionSKILL.md:2161 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Process kill commandscripts/trace_composed.py:157 · Process kill command — agent can terminate processes

AST05

MEDIUM

File type combined with upload actionreferences/maintenance-boundaries.md:39 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionreferences/file-inventory.md:390 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Process kill commandscripts/written_reason.py:48 · Process kill command — agent can terminate processes

AST05

MEDIUM

File type combined with upload actionSKILL.md:2260 · File type combined with upload action — agent may exfiltrate local data files

AST07