Skills/ClawHub/smyx-succulent-special-state-detection-analysis

smyx-succulent-special-state-detection-analysis@1.0.15

VERIFIED

Publisher claims: "AI-powered succulent special-state detection from HD images via plant cameras or smartphones. Identifies three critical conditions—black rot (stem base or leaves turning black and mushy), etiolation/melting (leaves becoming translucent and water-soaked), and stretching (elongated internodes, widened leaf spacing, loose rosette)—and outputs the anomaly type with severity grading, enabling early intervention such as beheading, water restriction, or increased light. Scenarios: home succulent care, succulent greenhouses, flower shops. | 通过多肉种植摄像头或手机拍摄的高清图像，利用AI视觉分析技术识别多肉植物的三种常见异常状态：黑腐病（茎基部或叶片变黑、腐烂）、化水（叶片透明化、水渍状）、徒长（茎节拉长、叶片间距增大、形态松散）。输出对应的异常状态类型及严重程度，帮助种植者及时采取处理措施（如砍头、控水、增加光照）。应用场景：多肉植物家庭养护、多肉大棚、花店。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher 18072937735 · joined 8 days agoInstalls 2,180Last detonated 27 h ago
$clawhub install smyx-succulent-special-state-detection-analysis
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-02 and scored it 80/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
Outbound HTTP to raw IP addressskills/smyx_common/scripts/config-dev.yaml:2 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Outbound HTTP to raw IP addressskills/smyx_common/scripts/config-dev.yaml:4 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL using raw IP addressskills/smyx_common/scripts/config-dev.yaml:2 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Outbound HTTP to raw IP addressskills/smyx_common/scripts/config-dev.yaml:3 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL using raw IP addressskills/smyx_common/scripts/config-dev.yaml:4 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Python subprocess execution detectedskills/smyx_common/scripts/skill.py:61 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
URL using raw IP addressskills/smyx_common/scripts/config-dev.yaml:3 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07