Skills/ClawHub/vexpath

vexpath@1.0.0

CAUTION· install only

Publisher claims: "Turn any OpenClaw instance into a VEX-powered operations engine. Automated email triage, inbox monitoring, lead classification, workflow automation, business..." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher smithbrock02-cmyk · publishing for 172 daysInstalls 687Last detonated 23 min ago
What would fix thisWatchDispute verdict

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-14 and scored it 75/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Pipe-to-shell pattern; Pipe-to-shell pattern. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

MEDIUM
File permission modification commandscripts/deploy-client.sh:63 · File permission modification command — agent changes file ownership/permissionschmod +x "$SKILL_DEST/scripts/"*.sh 2>/dev/null || trueFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File type combined with upload actionscripts/cold-outreach.sh:37 · File type combined with upload action — agent may exfiltrate local data filesecho "Usage: cold-outreach.sh <leads.csv> [output_dir]" >&2Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
CRITICAL
Pipe-to-shell patternscripts/provision-vps.sh:5 · Pipe-to-shell pattern — downloads and immediately executes remote code# Usage: curl -sSL <hosted-url>/provision-vps.sh | bash -s -- \Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
MEDIUM
Remote installer piped to shellscripts/provision-vps.sh:51 · Remote installer piped to shellcurl -fsSL https://deb.nodesource.com/setup_22.x | bash -Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07
LOW
Prompt injection attemptreferences/onboarding.md:224 · Prompt injection attempt — model control tokens · informational: not an instruction fileCalendar: Connected — [system]Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
MEDIUM
File type combined with upload actionscripts/cold-outreach.sh:5 · File type combined with upload action — agent may exfiltrate local data files# Usage: ./cold-outreach.sh <leads.csv> [output_dir]Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File permission modification commandscripts/cold-outreach.sh:55 · File permission modification command — agent changes file ownership/permissionschmod +x "$ESTIMATE_SCRIPT"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandscripts/setup-email.sh:88 · File permission modification command — agent changes file ownership/permissionschmod 600 "$CONFIG_FILE"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
CRITICAL
Pipe-to-shell patternscripts/provision-vps.sh:51 · Pipe-to-shell pattern — downloads and immediately executes remote codecurl -fsSL https://deb.nodesource.com/setup_22.x | bash -Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
MEDIUM
Remote installer piped to shellscripts/provision-vps.sh:5 · Remote installer piped to shell# Usage: curl -sSL <hosted-url>/provision-vps.sh | bash -s -- \Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07

Cost to the agent

Instructions loaded
≈1,589 tok
1 file · 21 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

5 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Pipe-to-shell pattern≈ +9 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
  2. Unclaimed publisher≈ +8 on the totalClaim smithbrock02-cmyk: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  3. File permission modification command≈ +2 on the totalRequest the narrowest permission that works; replace wildcards with the exact paths or hosts.
  4. File type combined with upload action≈ +2 on the totalRemove the call, or declare the host in frontmatter and explain in the README what is sent and why.
  5. Remote installer piped to shell≈ +2 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim smithbrock02-cmykPropose a patch to the maintainer