Skills/ClawHub/teamagent

teamagent@1.0.13

VERIFIED· install only

Publisher claims: "Multi-agent collaboration platform. Register your Agent, claim tasks, execute steps, and auto-decompose tasks with SSE realtime events." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher arplus · publishing for 261 daysInstalls 1,217Last detonated 18 min ago
$clawhub install teamagent
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-15 and scored it 81/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

MEDIUM
File type combined with upload actionagent-worker.js:375 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`\n💬 [SSE] chat:incoming → msgId=${msgId}, from=${senderName || '用户'}`)Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
HIGH
HTTP URL with a raw public IP addressSKILL.md:77 · HTTP URL with a raw public IP address — a hard-coded destination that domain-based monitoring cannot name> 1. 你注册用户了么？如果没有，在这里用邮箱去注册：http://118.195.138.220Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL using a raw public IP addressSKILL.md:4 · URL using a raw public IP address — may bypass domain-based filteringhomepage: http://118.195.138.220Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL using a raw public IP addressSKILL.md:37 · URL using a raw public IP address — may bypass domain-based filteringnode "{SKILL_DIR}\teamagent-client.js" set-hub http://118.195.138.220Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
HTTP URL with a raw public IP addressSKILL.md:37 · HTTP URL with a raw public IP address — a hard-coded destination that domain-based monitoring cannot namenode "{SKILL_DIR}\teamagent-client.js" set-hub http://118.195.138.220Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
HTTP URL with a raw public IP addressSKILL.md:4 · HTTP URL with a raw public IP address — a hard-coded destination that domain-based monitoring cannot namehomepage: http://118.195.138.220Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
HTTP URL with a raw public IP addressSKILL.md:33 · HTTP URL with a raw public IP address — a hard-coded destination that domain-based monitoring cannot namenode {SKILL_DIR}/teamagent-client.js set-hub http://118.195.138.220Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
HTTP URL with a raw public IP addressteamagent-client.js:17 · HTTP URL with a raw public IP address — a hard-coded destination that domain-based monitoring cannot nameconst DEFAULT_HUB_URL = 'http://118.195.138.220'Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
File type combined with upload actionagent-worker.js:55 · File type combined with upload action — agent may exfiltrate local data filesif (inputs.length > 0) console.log(` 输入: ${inputs.join(', ')}`)Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
URL using a raw public IP addressSKILL.md:33 · URL using a raw public IP address — may bypass domain-based filteringnode {SKILL_DIR}/teamagent-client.js set-hub http://118.195.138.220Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
HTTP URL with a raw public IP addressSKILL.md:78 · HTTP URL with a raw public IP address — a hard-coded destination that domain-based monitoring cannot name> 2. 如果注册了，打开 http://118.195.138.220 → 左侧「⊕ 配对我的 Agent」→ 输入配对码 **{配对码}**Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL using a raw public IP addressSKILL.md:78 · URL using a raw public IP address — may bypass domain-based filtering> 2. 如果注册了，打开 http://118.195.138.220 → 左侧「⊕ 配对我的 Agent」→ 输入配对码 **{配对码}**Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL using a raw public IP addressteamagent-client.js:17 · URL using a raw public IP address — may bypass domain-based filteringconst DEFAULT_HUB_URL = 'http://118.195.138.220'Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL using a raw public IP addressSKILL.md:77 · URL using a raw public IP address — may bypass domain-based filtering> 1. 你注册用户了么？如果没有，在这里用邮箱去注册：http://118.195.138.220Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07

Cost to the agent

Instructions loaded
≈4,007 tok
1 file · 5 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.