Skills/ClawHub/smyx-child-window-climbing-detection-analysis

smyx-child-window-climbing-detection-analysis@1.0.15

VERIFIED

Publisher claims: "Using fixed cameras in living rooms or child-activity areas (aimed at windows or balconies), AI pose estimation and object detection analyze the video in real time to recognize whether a child is climbing windows, leaning out, or gripping window-sill edges. | 通过家庭客厅或儿童活动区域的固定摄像头（需对准窗户或阳台），利用AI姿态估计和目标检测技术实时分析视频，识别儿童是否发生攀爬窗户、身体探出窗外、抓握窗台边缘等危险行为，当检测到危险动作时立即输出预警，联动手机APP推送警报或触发声光报警器。该技能可有效预防儿童坠楼事故。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher 18072937735 · joined 8 days agoInstalls 2,259Last detonated 20 h ago
$clawhub install smyx-child-window-climbing-detection-analysis
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-02 and scored it 80/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.1sprocessno install scripts in bundle
0.1sprocessscript backend runs setup only
0.1sprocessscript backend runs setup only

Static findings

MEDIUM
URL using raw IP addressskills/smyx_common/scripts/config-dev.yaml:4 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Outbound HTTP to raw IP addressskills/smyx_common/scripts/config-dev.yaml:4 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Outbound HTTP to raw IP addressskills/smyx_common/scripts/config-dev.yaml:2 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL using raw IP addressskills/smyx_common/scripts/config-dev.yaml:2 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Outbound HTTP to raw IP addressskills/smyx_common/scripts/config-dev.yaml:3 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Python subprocess execution detectedskills/smyx_common/scripts/skill.py:61 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
URL using raw IP addressskills/smyx_common/scripts/config-dev.yaml:3 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07