Skills/ClawHub/smart-git

smart-git@0.1.1

VERIFIED

Publisher claims: "Use the smart-commit-host-agent CLI for local code review, creating a PR/MR, reviewing an existing PR/MR, listing my open PRs/MRs, batch-reviewing my PRs/MRs, or listing my own commits for a date range. Triggers: create MR / create PR / create pull request / open a PR / submit and create MR; review MR / review PR plus a PR/MR URL; list my MRs / list my open PRs / my MR list / my-pull-request list; batch review my MRs / batch-review my PRs / my-pull-request batch-review; list my commits / my commits today / my commits this week / what did I commit / my-commit list; local code review / local review of changes / local review diff / smart-git local review. Do not use for ordinary code review / review code without the word local. Must read this SKILL.md first. CLI task flow plus Host-Agent turn loop only; do not use gh for GitLab; no manual commit/push/API; do not edit business source based on review." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher yexinjia · joined 0 days agoInstalls 1,153Last detonated 2 h ago
$clawhub install smart-git
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-27 and scored it 85/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
Prompting user to enter sensitive credentialsSKILL.md:445 · Prompting user to enter sensitive credentials — social engineeringFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST03
MEDIUM
File type combined with upload actionSKILL.md:608 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
HIGH
Prompting user to enter sensitive credentialsSKILL.md:517 · Prompting user to enter sensitive credentials — social engineeringFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST03
HIGH
Prompting user to enter sensitive credentialsSKILL.md:609 · Prompting user to enter sensitive credentials — social engineeringFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST03
HIGH
Persistence: instructs the agent to auto-load this skill in future sessionsSKILL.md:117 · Persistence: instructs the agent to auto-load this skill in future sessionsFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01