Skills/ClawHub/subscription-auditor

subscription-auditor@1.1.0

VERIFIED

Publisher claims: "Personal admin: track subscriptions (cost, cycle, renewal date, auto-renew), see monthly/yearly totals, and get renewal reminders within a configurable window. Cycle math is explicit and tested; past-due renewals are flagged, never clamped away. All data stays local — nothing is sent anywhere and nothing is auto-discovered." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher paradoxfuzzle · joined 6 days agoInstalls 196Last detonated 6d ago
$clawhub install subscription-auditor
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-29 and scored it 91/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
Python subprocess execution detectedtest_skill.py:34 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05

No other findings across 754 lines in 4 files.