web-intel-search@0.1.0

CAUTION

Publisher claims: "Security search & research: OSINT, pentest, bug bounty, CVE/PoC, writeups, cheatsheets, red team, appsec, cloud architecture, debug, labs, blogs." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher hoangthanhnguyen · joined 2 days agoInstalls 54Last detonated 43 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsreferences/dorks.md:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsSKILL.md:402 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Pipe-to-shell patternSKILL.md:524 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

CRITICAL

Pipe-to-shell patternSKILL.md:618 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

CRITICAL

Fake instruction boundary tagreferences/modules/07-security-architecture-cloud.md:149 · Fake instruction boundary tag

AST01

MEDIUM

Remote installer piped to shellSKILL.md:618 · Remote installer piped to shell

AST07

CRITICAL

Access to sensitive file pathsreferences/dorks.md:232 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/dorks.md:141 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/engines.md:115 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

Remote installer piped to shellSKILL.md:524 · Remote installer piped to shell

AST07

CRITICAL

Access to sensitive file pathsreferences/tooling.md:102 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/engines.md:101 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Authorization escalation languagereferences/modules/03-cve-poc-exploit.md:181 · Authorization escalation language

AST01

CRITICAL

Pipe-to-shell patternreferences/tooling.md:4 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

CRITICAL

Access to sensitive file pathsreferences/dorks.md:231 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

Remote installer piped to shellreferences/tooling.md:4 · Remote installer piped to shell

AST07