t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
CRITICALDestructive file system command detectedreferences/install-protocol.md:67 · Destructive file system command detected
AST05 HIGHPython subprocess execution detectedscripts/manage_skill.py:102 · Python subprocess execution detected
AST05 HIGHOutbound HTTP to raw IP addressreferences/sources.md:49 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07 HIGHOutbound HTTP to raw IP addressscripts/manage_skill.py:71 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07 HIGHOutbound HTTP to raw IP addressscripts/manage_skill.py:73 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07 HIGHPython subprocess execution detectedscripts/manage_skill.py:88 · Python subprocess execution detected
AST05 HIGHOutbound HTTP to raw IP addressscripts/manage_skill.py:72 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07 HIGHOutbound HTTP to raw IP addressscripts/manage_skill.py:74 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07 HIGHOutbound HTTP to raw IP addressreferences/sources.md:52 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07 MEDIUMURL using raw IP addressscripts/manage_skill.py:72 · URL using raw IP address — may bypass domain-based filtering
AST07 MEDIUMURL using raw IP addressscripts/manage_skill.py:71 · URL using raw IP address — may bypass domain-based filtering
AST07 MEDIUMURL using raw IP addressscripts/manage_skill.py:73 · URL using raw IP address — may bypass domain-based filtering
AST07 MEDIUMURL using raw IP addressreferences/sources.md:52 · URL using raw IP address — may bypass domain-based filtering
AST07 MEDIUMURL using raw IP addressscripts/manage_skill.py:74 · URL using raw IP address — may bypass domain-based filtering
AST07 HIGHOutbound HTTP to raw IP addressscripts/search_anim.py:56 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07 MEDIUMURL using raw IP addressreferences/sources.md:49 · URL using raw IP address — may bypass domain-based filtering
AST07 MEDIUMURL using raw IP addressscripts/search_anim.py:56 · URL using raw IP address — may bypass domain-based filtering
AST07