Skills/ClawHub/smyx-infant-suffocation-risk-detection-analysis

smyx-infant-suffocation-risk-detection-analysis@1.0.5

VERIFIED

Publisher claims: "Using a baby monitor (smart camera) fixed above the crib, the system analyzes infant sleep video in real time to detect sleep posture (supine, side, prone) and whether the mouth/nose area is occluded by a blanket, pillow, plush toy or other object. | 通过婴儿监护器（智能摄像头）固定于婴儿床上方，实时分析婴儿睡眠视频，检测婴儿的睡姿（仰卧、侧卧、俯卧）以及口鼻区域是否被被子、枕头、玩偶等异物遮挡。当检测到俯卧或口鼻被遮挡时，输出风险等级（中风险/高风险），并立即向父母手机APP推送警报，预防婴儿猝死综合征（SIDS）和窒息意外。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher smyx-sunjinhui · joined 8 days agoInstalls 1,191Last detonated 4d ago
$clawhub install smyx-infant-suffocation-risk-detection-analysis
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-30 and scored it 80/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
Outbound HTTP to raw IP addressskills/smyx_common/scripts/config-dev.yaml:4 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Python subprocess execution detectedskills/smyx_common/scripts/skill.py:61 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
URL using raw IP addressskills/smyx_common/scripts/config-dev.yaml:3 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL using raw IP addressskills/smyx_common/scripts/config-dev.yaml:4 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Outbound HTTP to raw IP addressskills/smyx_common/scripts/config-dev.yaml:3 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL using raw IP addressskills/smyx_common/scripts/config-dev.yaml:2 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Outbound HTTP to raw IP addressskills/smyx_common/scripts/config-dev.yaml:2 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07