Skills/ClawHub/sluice

sluice@1.0.0

VERIFIED· install only

Publisher claims: "An outbound egress guard for agents — scan any message (email, social draft, Telegram reply, a write to a public site) for leaked secrets and private identif..." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher workloftai · publishing for 136 daysInstalls 360Last detonated 2d ago
$clawhub install sluice
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-12 and scored it 84/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
Access to sensitive file pathsSKILL.md:16 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesAgents touch live credentials all day: API keys in `.env`, bot tokens in systemdFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
AWS access key pattern detectedtests/test_detectors.py:38 · AWS access key pattern detected — possible hardcoded or harvested keyself.assertIn("aws_access_key", names("AKIAIOSFODNN7EXAMPLE"))Fix: Never read or enumerate credential locations; accept a documented environment variable instead.
AST03
MEDIUM
AWS access key pattern detectedtests/test_cli.py:44 · AWS access key pattern detected — possible hardcoded or harvested keycode, out, _ = run(["redact"], stdin="x AKIAIOSFODNN7EXAMPLE y")Fix: Never read or enumerate credential locations; accept a documented environment variable instead.
AST03
MEDIUM
Slack token pattern detectedtests/test_detectors.py:41 · Slack token pattern detected — possible hardcoded or harvested tokenself.assertIn("slack_token", names("xoxb-123456789012-abcdEFGHijkl"))Fix: Never read or enumerate credential locations; accept a documented environment variable instead.
AST03
MEDIUM
AWS access key pattern detectedtests/test_core.py:66 · AWS access key pattern detected — possible hardcoded or harvested keyt = "AKIAIOSFODNN7EXAMPLE"Fix: Never read or enumerate credential locations; accept a documented environment variable instead.
AST03
HIGH
Access to sensitive file pathsbench.py:42 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files("openai_key", f"the key sk-{_rand(48)} goes in .env"),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
AWS access key pattern detectedtests/test_core.py:61 · AWS access key pattern detected — possible hardcoded or harvested keyt = "a glpat-abcDEF1234567890xyz9 b AKIAIOSFODNN7EXAMPLE c"Fix: Never read or enumerate credential locations; accept a documented environment variable instead.
AST03
MEDIUM
AWS access key pattern detectedtests/test_core.py:22 · AWS access key pattern detected — possible hardcoded or harvested keyt = "AKIAIOSFODNN7EXAMPLE"Fix: Never read or enumerate credential locations; accept a documented environment variable instead.
AST03
MEDIUM
AWS access key pattern detectedtests/test_cli.py:56 · AWS access key pattern detected — possible hardcoded or harvested key["scan", "--allow", "EXAMPLE"], stdin="AKIAIOSFODNN7EXAMPLE"Fix: Never read or enumerate credential locations; accept a documented environment variable instead.
AST03

Cost to the agent

Instructions loaded
≈641 tok
1 file · 14 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.