Skills/ClawHub/vibecoding-deployment-auditor

vibecoding-deployment-auditor@2.3.21

VERIFIED· install only

Publisher claims: "免费 AI 网站一键上线助手（内部标识：vibecoding-deployment-auditor）：适合国内用户与零基础小白，无需 Git、服务器、域名或复杂部署配置；面向 VibeCoding 生成的纯静态网站，适用于官方 Sites/ChatGPT Sites 上线不成功或不适用时，通过私有 ZIP 链路完成上线并验证公开 HTTPS 地址。支持 H5 小游戏、个人作品集、企业官网、活动落地页、数据可视化及浏览器直连公开 HTTPS API 的前端工具；最终产物必须可本地构建为含 index.html、可由 CDN/Nginx 直接提供的静态目录，不适用于需要自建后端、数据库、服务器运行时或远端安装/启动依赖的项目。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher kyriswu · publishing for 168 daysInstalls 1,804Last detonated 7d ago
$clawhub install vibecoding-deployment-auditor
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-07 and scored it 84/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
README links to an external installerREADME.md → https://f.devtool.uk/downloads/*.ziphttps://f.devtool.uk/downloads/*.zipFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST06
HIGH
Access to sensitive file pathsSKILL.md:127 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- `.env`、密钥、Cookie、私钥、服务端配置混入发布物；Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:179 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files提交对象必须且仅能是已通过本 Skill 审计的最终静态发布 ZIP：仅含 `artifact-manifest.json`、`deployment-dossier.json` 和 `site/` 下可公开托管的页面资源。它不含源码仓库、`.git`、`node_modules`、`.env*`、密钥、Cookie、用户数据、脚本或服务端配置。ZIP 先发送至用户指定的私有上传端点，再由 `/deFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:135 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- 上传内容只能是构建产物，绝不上传源码仓库、`.git`、`node_modules`、`.env*`、source map、锁文件、Docker/PM2 配置或脚本。Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05

Cost to the agent

Instructions loaded
≈2,929 tok
1 file · 15 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.