sofagent@1.7.0

CAUTION

Publisher claims: "FDE Skill——帮 FDE（前线部署工程师）更好完成企业 AI 落地的方法论 Skill。约束 Agent 行为、审计每次变更、沉淀经验。底层实现叫约束层——一个层五种能力：注入·审计·回溯·沉淀·进化。FORGE 自迭代工具链是内部开发工具。内置持续优化模式（sustain），自动读 audit 报告趋势生成优化报告。 " Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher kongfangxun · joined 2 days agoInstalls 4,835Last detonated 33 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathscustom/README.md:127 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsharness/entry-gate.md:23 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

Remote installer piped to shellharness/entry-gate.md:20 · Remote installer piped to shell

AST07

CRITICAL

Destructive file system command detectedharness/loop-check.md:39 · Destructive file system command detected

AST05

CRITICAL

Access to sensitive file pathsagents/engineer/SKILL.md:90 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Destructive file system command detectedharness/entry-gate.md:20 · Destructive file system command detected

AST05