Skills/ClawHub/teable-assistant-ops

teable-assistant-ops@1.10.0

CAUTION

Publisher claims: "Operate Teable projects — tables, fields, views, records, SQL queries, automations, headless routines, apps, image generation, and web scraping. Trigger when user mentions Cuppy, Teable, teable CLI, or Teable-style IDs (bseXXX, tblXXX, fldXXX, recXXX, viwXXX), or wants to manage tables/fields/records, build dashboards/apps, generate images or charts, create automations, import/export data, trigger AI fill, or scrape websites (LinkedIn, Amazon, YouTube, etc.) — even if they don't explicitly say "Teable" but are clearly working with a Teable project (called base in the API)." Observed in sandbox: reads credential files.

Registry ClawHubPublisher littleben · joined 0 days agoInstalls 101Last detonated 57 min ago
What would fix thisWatchDispute verdict

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-26 and scored it 59/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Summary: reads credential files.

Behavior trace

Honeypot run · 1 s · 1 scenarios
t+CategoryObserved action
1.2sfilesystemread ~/.npmrc
1.2sfilesystemread ~/.npm/_logs · ~/.npm/_cacache/index-v5/50/38/4526629df07041446859563dcd9726afc50ffb2868e31dac8b977fe1ffdf outside project
1.2snetworkCONNECT https://registry.npmjs.org
1.2sprocessexec /usr/bin/sed
1.2sprocessexec /usr/bin/cut
1.2sprocessexec /usr/local/bin/npm
1.2sprocessexited 1: npm error A complete log of this run can be found in: /tmp/ks-detonate-0pR2aG/setup/home/.npm/_logs/2026-10-26T22_31_23_825Z-debug-0.log
1.2sprocessscript backend runs setup only
1.2sprocessscript backend runs setup only

Static findings

No findings across 5,254 lines in 42 files.

What would make this Verified

21 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Reads credential files≈ +27 on the totalThe sandbox saw reads under ~/.ssh, ~/.aws, ~/.npmrc, ~/.config or similar. Read only files inside the project, and only the ones the task needs.
  2. Unclaimed publisher≈ +8 on the totalClaim littleben: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  3. Touches files outside the project≈ +7 on the totalKeep reads and writes inside the working directory, or declare the exact paths in `filesystem:` and explain why in the README.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim littleben