Skills/ClawHub/vigilath-geo

vigilath-geo@0.1.0

CAUTION· install only

Publisher claims: "检测、查询与优化品牌在 AI 搜索引擎(ChatGPT / Perplexity / DeepSeek / 豆包 / 通义 / 文心 / 元宝)中的可见性与被引用率(GEO/AEO),并可查品牌舆情与热点。**任何网站的 GEO / SEO 体检不需要登录、免费、不限次**——用户说「测一下这个网站 / 这个站 GEO 怎么样 / SEO 分数多少 / 帮我体检一下官网」就直接跑 check。另有需授权的能力:当用户问到「在 AI 里被搜到几个 / AI 搜索可见性 / GEO / AEO / 竞品在 AI 里怎么对比 / 怎么提升被 AI 引用 / 投放效果 / 露出率 / 日报周报月报」,或问到「今天有没有负面 / 舆情 / 品牌声量 / 有什么热点可蹭 / 调监测词」这类问题时使用。" Observed in sandbox: sends data to vigilath.cn.

Registry ClawHubPublisher dz1995 · publishing for 83 daysInstalls 374Last detonated 6d ago
What would fix thisWatchDispute verdict

Coverage

Install scripts ran; no agent task scenario for this bundle.
Tested
install scripts, with decoy credentials in place · second launch with the clock 45 days ahead · every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; install scripts ran; no agent task scenario for this bundle) on 2026-11-08 and scored it 50/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Pipe-to-shell pattern; Pipe-to-shell pattern; Pipe-to-shell pattern. Summary: sends data to vigilath.cn.

Behavior trace

Honeypot run · 0 s · 2 scenarios
t+CategoryObserved action
0.1snetworkCONNECT tcp://vigilath.cn:443 · not in the allow-list, refused
0.1sprocessexec /usr/bin/hostname
0.1sprocessexec /usr/bin/curl
0.1sprocessexited 1: [vigilath-geo] 错误:连不上 https://vigilath.cn/api/agent/v1 —— 检查网络,或用 --base 指定正确的站点域名
0.1sprocessscript backend runs setup only
0.1sprocessscript backend runs setup only
0.2sprocesssecond launch, clock +45 days, CI unset
0.3snetworkCONNECT tcp://vigilath.cn:443 · not in the allow-list, refused
0.3sprocessexec /usr/bin/hostname
0.3sprocessexec /usr/bin/curl
0.3sprocessexited 1: [vigilath-geo] 错误:连不上 https://vigilath.cn/api/agent/v1 —— 检查网络,或用 --base 指定正确的站点域名

Static findings

CRITICAL
Pipe-to-shell patterninstall.sh:5 · Pipe-to-shell pattern — downloads and immediately executes remote code# curl -fsSL https://vigilath.cn/skill/install.sh | bashFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
CRITICAL
Pipe-to-shell patterninstall.sh:10 · Pipe-to-shell pattern — downloads and immediately executes remote code# curl -fsSL https://vigilath.cn/skill/install.sh | bash -s -- --skills geoFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
CRITICAL
Pipe-to-shell patterninstall.sh:13 · Pipe-to-shell pattern — downloads and immediately executes remote code# curl -fsSL https://vigilath.cn/skill/install.sh | bash -s -- <你的token> --base https://vigilath.cnFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
MEDIUM
Remote installer piped to shellinstall.sh:5 · Remote installer piped to shell# curl -fsSL https://vigilath.cn/skill/install.sh | bashFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07
CRITICAL
Pipe-to-shell patterninstall.sh:19 · Pipe-to-shell pattern — downloads and immediately executes remote code# ★ --base 是"从哪个域名装就指向哪个域名"的关键:本脚本被 `curl | bash` 管道执行时,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
CRITICAL
Pipe-to-shell patterninstall.sh:8 · Pipe-to-shell pattern — downloads and immediately executes remote code# curl -fsSL https://vigilath.cn/skill/install.sh | bash -s -- --skills site-audit,seo-auditFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
MEDIUM
Remote installer piped to shellinstall.sh:8 · Remote installer piped to shell# curl -fsSL https://vigilath.cn/skill/install.sh | bash -s -- --skills site-audit,seo-auditFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07
MEDIUM
File permission modification commandinstall.sh:194 · File permission modification command — agent changes file ownership/permissionschmod 600 "$HOME/.vigilath/config"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandinstall.sh:16 · File permission modification command — agent changes file ownership/permissions# ② 拿到 token 写进 ~/.vigilath/config(chmod 600);③ 自检。Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
Remote installer piped to shellinstall.sh:19 · Remote installer piped to shell# ★ --base 是"从哪个域名装就指向哪个域名"的关键:本脚本被 `curl | bash` 管道执行时,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07
MEDIUM
Remote installer piped to shellinstall.sh:10 · Remote installer piped to shell# curl -fsSL https://vigilath.cn/skill/install.sh | bash -s -- --skills geoFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07
MEDIUM
Remote installer piped to shellinstall.sh:13 · Remote installer piped to shell# curl -fsSL https://vigilath.cn/skill/install.sh | bash -s -- <你的token> --base https://vigilath.cnFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07

Cost to the agent

Instructions loaded
≈1,650 tok
1 file · 5 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

30 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Contacts a host you did not declare≈ +23 on the totalList every host you talk to in SKILL.md frontmatter (`network: [api.example.com]`), or stop contacting the ones you cannot justify.
  2. Pipe-to-shell pattern≈ +9 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
  3. Unclaimed publisher≈ +8 on the totalClaim dz1995: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  4. Remote installer piped to shell≈ +2 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
  5. File permission modification command≈ +2 on the totalRequest the narrowest permission that works; replace wildcards with the exact paths or hosts.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim dz1995Propose a patch to the maintainer