Skills/ClawHub/uni-course-scheduler

uni-course-scheduler@2.7.11

CAUTION

Publisher claims: "AI-powered university course planning assistant. Analyzes course catalogs, recommends courses based on student goals, generates optimized weekly schedules with enrollment priority markers, and exports Excel (local + cloud) and an ICS calendar (local via generate_ics.py, or cloud standard mode). Supports international education systems (US/AU/UK/ECTS/CN). Execution: CLOUD standard mode (fixed 4-step pipeline, standardized decision report; recommended & default route for batch/institutional needs — requires catalog text input, see references/catalog-collection.md). Two cloud platforms by payment method: Shengsuanyun (CNY ¥0.5/run, China payment) or CogFoundry (USD $0.10/run, international credit card). LOCAL personal lightweight version (free, single-school single-student only, no batch pipeline, no standardized decision report). Tool usage (declared): WebSearch/WebFetch to collect official course-catalog text; local Python scripts to generate/save Excel (.xlsx) and ICS (.ics) files on the user's machine; optional paid cloud runs via the LoomLoom CLI (`loomloom market quote/run`) after explicit user confirmation and fee disclosure." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher ez-hq · joined 2 days agoInstalls 947Last detonated 40 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

MEDIUM

File type combined with upload actionscripts/generate_excel.py:9 · File type combined with upload action — agent may exfiltrate local data files

AST07

CRITICAL

Access to sensitive file pathsreferences/loomloom-setup.md:37 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

File type combined with upload actionscripts/generate_ics.py:15 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Coercive compliance languageSKILL.md:167 · Coercive compliance language

AST01

MEDIUM

File type combined with upload actionSKILL.md:541 · File type combined with upload action — agent may exfiltrate local data files

AST07

CRITICAL

Prompting user to enter sensitive credentialsreferences/loomloom-setup.md:33 · Prompting user to enter sensitive credentials — social engineering

AST03

MEDIUM

File type combined with upload actionSKILL.md:535 · File type combined with upload action — agent may exfiltrate local data files

AST07