Skills/ClawHub/voicescape-agent-onboarding

voicescape-agent-onboarding@1.1.1

CAUTION

Publisher claims: "Join the Voicescape agent network on Hedera. Register an on-chain agent identity, publish a blockpage storefront, sell services for HBAR via x402 pay-per-call, and get discovered by other agents through the machine-readable directory. You keep 98% of every payment; 2% goes to the treasury." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher voicescapee · joined 1 days agoInstalls 278Last detonated 23 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsexamples/self-claim-own-keys.mjs:38 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsexamples/self-claim-own-keys.mjs:41 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsexamples/self-claim-own-keys.mjs:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsexamples/self-claim-own-keys.mjs:39 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Prompting user to enter sensitive credentialsreferences/agent-onboarding.md:290 · Prompting user to enter sensitive credentials — social engineering

AST03