Skills/ClawHub/typecho-blog-publish

typecho-blog-publish@1.3.0

VERIFIED· install only

Publisher claims: "通过 XML-RPC 自动发布文章到 Typecho 博客。支持文件读取、草稿模式、标签管理。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher jiliangseason-arch · publishing for 232 daysInstalls 1,187Last detonated 7d ago
$clawhub install typecho-blog-publish
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-07 and scored it 85/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
Access to sensitive file pathsscripts/cleanup_blog.py:20 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesos.path.expanduser('~/.openclaw/workspace/.env'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/manage.py:20 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesos.path.join(os.path.dirname(__file__), '..', '..', '.env'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/cleanup_blog.py:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesos.path.join(os.path.dirname(__file__), '..', '..', '.env'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:152 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- 脚本自动读取 `.env` 文件中的配置Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/cleanup_blog.py:18 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesos.path.join(os.path.dirname(__file__), '..', '.env'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/fix_titles.py:12 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"""加载 .env 文件"""Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/fix_titles.py:16 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesos.path.join(os.path.dirname(__file__), '..', '.env'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/fix_dates.py:18 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesos.path.join(os.path.dirname(__file__), '..', '.env'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files在 `.env` 文件中配置以下环境变量：Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/fix_dates.py:20 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesos.path.expanduser('~/.openclaw/workspace/.env'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/fix_dates.py:14 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"""加载 .env 文件"""Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/manage.py:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesos.path.join(os.path.dirname(__file__), '..', '.env'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/fix_dates.py:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesos.path.join(os.path.dirname(__file__), '..', '..', '.env'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:151 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- 密码存储在 `.env` 文件中，权限为 600（仅所有者可读写）Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/cleanup_blog.py:13 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"""加载 .env 文件"""Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
URL with suspicious TLDscripts/fix_titles.py:36 · URL with suspicious TLD — commonly used for phishing/malwareXMLRPC_URL = config.get('BLOG_URL', 'http://yuanblog.tk:9980') + config.get('BLOG_XMLRPC', '/index.php/action/xmlrpc')Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL with suspicious TLDscripts/cleanup_blog.py:38 · URL with suspicious TLD — commonly used for phishing/malwareXMLRPC_URL = config.get('BLOG_URL', 'http://yuanblog.tk:9980') + config.get('BLOG_XMLRPC', '/index.php/action/xmlrpc')Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Access to sensitive file pathsscripts/publish_post.py:43 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"""加载 .env 文件（支持多级查找）"""Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/upload_image.py:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesos.path.expanduser('~/.openclaw/workspace/.env'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/publish_post.py:49 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesos.path.join(os.path.dirname(__file__), '..', '.env'), # 上一级目录Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/fix_titles.py:17 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesos.path.join(os.path.dirname(__file__), '..', '..', '.env'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/upload_image.py:12 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"""加载 .env 文件"""Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/setup_runtime.sh:24 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesecho " 请确保主 .env 文件包含 BLOG_PASSWORD"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/publish_post.py:48 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesos.path.join(os.path.dirname(__file__), '.env'), # 当前目录Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/setup_runtime.sh:20 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 检查 .env 文件Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/setup_runtime.sh:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesecho "✅ .env 文件存在"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/publish_post.py:16 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- 账号密码存储在 .env 文件中，权限为 600 (仅所有者可读写)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
URL with suspicious TLDSKILL.md:23 · URL with suspicious TLD — commonly used for phishing/malware| `BLOG_URL` | 博客地址 | `http://yuanblog.tk:9980` |Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Access to sensitive file pathsscripts/republish_draft.py:13 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesos.path.expanduser('~/.openclaw/workspace/.env'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/publish_draft.py:13 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesos.path.join(os.path.dirname(__file__), '..', '.env'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/setup_runtime.sh:23 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesecho "⚠️ 警告：未找到 .env 文件"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/manage.py:21 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesos.path.expanduser('~/.openclaw/workspace/.env'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
URL with suspicious TLDscripts/fix_dates.py:38 · URL with suspicious TLD — commonly used for phishing/malwareXMLRPC_URL = config.get('BLOG_URL', 'http://yuanblog.tk:9980') + config.get('BLOG_XMLRPC', '/index.php/action/xmlrpc')Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Access to sensitive file pathsscripts/fix_titles.py:18 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesos.path.expanduser('~/.openclaw/workspace/.env'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/manage.py:14 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"""加载 .env 文件（支持多级查找）"""Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/publish_draft.py:12 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesos.path.expanduser('~/.openclaw/workspace/.env'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/publish_post.py:17 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- 脚本自动读取 .env 文件中的配置Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/quick_publish.py:12 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesos.path.expanduser('~/.openclaw/workspace/.env'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/republish_draft.py:14 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesos.path.join(os.path.dirname(__file__), '..', '.env'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/upload_image.py:16 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesos.path.join(os.path.dirname(__file__), '..', '.env'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/quick_publish.py:13 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesos.path.join(os.path.dirname(__file__), '..', '.env'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/setup_runtime.sh:21 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesENV_FILE="$BASE_DIR/.env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
URL with suspicious TLDscripts/fix_dates.py:129 · URL with suspicious TLD — commonly used for phishing/malwareprint(" http://yuanblog.tk:9980/")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL with suspicious TLDscripts/quick_publish.py:60 · URL with suspicious TLD — commonly used for phishing/malwareprint(f"🔗 链接：http://yuanblog.tk:9980/archives/{post_id}.html")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL with suspicious TLDscripts/fix_titles.py:108 · URL with suspicious TLD — commonly used for phishing/malwareprint(" http://yuanblog.tk:9980/")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL with suspicious TLDscripts/publish_draft.py:32 · URL with suspicious TLD — commonly used for phishing/malwareXMLRPC_URL = config.get('BLOG_URL', 'http://yuanblog.tk:9980') + config.get('BLOG_XMLRPC', '/index.php/action/xmlrpc')Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL with suspicious TLDscripts/publish_raw.py:26 · URL with suspicious TLD — commonly used for phishing/malwareXMLRPC_URL = config.get('BLOG_URL', 'http://yuanblog.tk:9980') + config.get('BLOG_XMLRPC', '/index.php/action/xmlrpc')Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL with suspicious TLDscripts/upload_image.py:34 · URL with suspicious TLD — commonly used for phishing/malwareBLOG_URL = config.get('BLOG_URL', 'http://yuanblog.tk:9980')Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL with suspicious TLDscripts/republish_draft.py:29 · URL with suspicious TLD — commonly used for phishing/malwareXMLRPC_URL = config.get('BLOG_URL', 'http://yuanblog.tk:9980') + config.get('BLOG_XMLRPC', '/index.php/action/xmlrpc')Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL with suspicious TLDscripts/quick_publish.py:28 · URL with suspicious TLD — commonly used for phishing/malwareXMLRPC_URL = config.get('BLOG_URL', 'http://yuanblog.tk:9980') + config.get('BLOG_XMLRPC', '/index.php/action/xmlrpc')Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL with suspicious TLDscripts/manual_publish.py:44 · URL with suspicious TLD — commonly used for phishing/malwarewebbrowser.open('http://yuanblog.tk:9980/admin/write.php')Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL with suspicious TLDscripts/manual_publish.py:17 · URL with suspicious TLD — commonly used for phishing/malwarehttp://yuanblog.tk:9980/adminFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL with suspicious TLDscripts/manage.py:39 · URL with suspicious TLD — commonly used for phishing/malwareXMLRPC_URL = config.get('BLOG_URL', 'http://yuanblog.tk:9980') + config.get('BLOG_XMLRPC', '/index.php/action/xmlrpc')Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL with suspicious TLDscripts/publish_post.py:296 · URL with suspicious TLD — commonly used for phishing/malwareXMLRPC_URL = config.get('BLOG_URL', 'http://yuanblog.tk:9980') + config.get('BLOG_XMLRPC', '/index.php/action/xmlrpc')Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07

Cost to the agent

Instructions loaded
≈729 tok
1 file · 39 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.