Skills/ClawHub/smyx-egg-incubation-monitoring-analysis

smyx-egg-incubation-monitoring-analysis@1.0.17

VERIFIED

Publisher claims: "Through a fixed camera (macro or high-resolution) in the incubator, the system periodically captures surface images of turtle or snake eggs and uses AI visual analysis to detect changes in eggshell colour (normally white or pale yellow; after fertilisation, grey spots or a vascular network may appear), blood streaks (early vascular formation in fertilised eggs, appearing as fine red lines), and embryo silhouette (a dark mass. | 通过孵化箱内的固定摄像头（微距或高分辨率），定期拍摄龟蛋或蛇蛋的表面图像，利用 AI 视觉分析技术检测蛋壳颜色变化（正常为白色或淡黄色，受精发育后可能出现灰斑、血管网络）、血丝（受精卵早期血管形成，呈红色细线状）以及胚胎轮廓（后期可见黑影）。系统每日或每两日自动拍照分析，生成孵化报告。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher 18072937735 · joined 8 days agoInstalls 2,317Last detonated 3d ago
$clawhub install smyx-egg-incubation-monitoring-analysis
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-31 and scored it 80/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
Outbound HTTP to raw IP addressskills/smyx_common/scripts/config-dev.yaml:4 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Outbound HTTP to raw IP addressskills/smyx_common/scripts/config-dev.yaml:2 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL using raw IP addressskills/smyx_common/scripts/config-dev.yaml:2 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Outbound HTTP to raw IP addressskills/smyx_common/scripts/config-dev.yaml:3 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL using raw IP addressskills/smyx_common/scripts/config-dev.yaml:4 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Python subprocess execution detectedskills/smyx_common/scripts/skill.py:61 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
URL using raw IP addressskills/smyx_common/scripts/config-dev.yaml:3 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07