Is stateroot@1.1.4 safe to install?

stateroot@1.1.4

VERIFIED

Publisher claims: "Install and set up StateRoot, the persistent, federated meta-harness for AI agents. The harness is disposable. The work is not: personality, plans, tools and skills, memories, learnings, and project context carry across Claude Code, Codex, Cursor, Kimi, OpenClaw, and other supported harnesses. Use this bootstrap skill when the user asks to install or set up StateRoot, when `stateroot` is missing from PATH, or when setup has not run. After setup, follow the built-in StateRoot skill for resume, checkpoint, handoff, memory, and daily workflow." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher usama04 · joined 4 days agoInstalls 642Last detonated 4d ago

$clawhub install stateroot

Watch Report an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-30 and scored it 86/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

Pipe-to-shell patternSKILL.md:126 · Pipe-to-shell pattern — downloads and immediately executes remote codeFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST06

HIGH

Pipe-to-shell patternSKILL.md:110 · Pipe-to-shell pattern — downloads and immediately executes remote codeFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST06

MEDIUM

Remote installer piped to shellSKILL.md:110 · Remote installer piped to shellFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST07

MEDIUM

Remote installer piped to shellSKILL.md:126 · Remote installer piped to shellFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST07