style-card@0.6.0

CAUTION

Publisher claims: "图生风格卡——从参考图反推结构化风格卡并入库，再用风格卡为任意文本生成同风格图片。触发场景：用户给一张图说"总结这个画风/反推prompt/做成风格卡"，或用户给文本要求"用我的风格库/风格卡出图"。Use when the user wants to reverse-engineer an image's visual style into a reusable, slot-based style card, or to generate images from text using the accumulated style card library." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher bonniegeng-max · joined 0 days agoInstalls 0Last detonated 1 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

URL with embedded credentialsexamples/便当盒BentoGrid_demo_Bonnie的Skill工坊.html:6 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

URL with embedded credentialsexamples/杂志编辑风_demo_会赚时间的妈妈书评.html:6 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

URL with embedded credentialsreferences/html-template.md:26 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

npx invocation of non-well-known packagescripts/export-png.sh:26 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagescripts/export-png.sh:4 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagescripts/export-png.sh:25 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

URL with embedded credentialsexamples/复古印刷_HTML引擎_学习知识地图.html:7 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

URL with embedded credentialsexamples/技术原理分步动画_demo_RAG一次提问的旅程.html:6 · URL with embedded credentials — may be phishing or credential leaking

AST07