Skills/ClawHub/wrong-item-talking

wrong-item-talking@0.1.9

VERIFIED

Publisher claims: "Turn a user-supplied wrong-item script and authorized stills into one wrong item talking clip per still. This mistake explanation talking video studio voices a line from the script for each photo, then animates that photo into a 2 to 15s wrong-item explanation talking clip, ready to share as a homework error talking clip. Use it for error explanation talking pack and wrong-item script talking clip work that stays one photo, one clip." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher beatra-ai · joined 7 days agoInstalls 548Last detonated 5d ago
$clawhub install wrong-item-talking
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-29 and scored it 82/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
Auto-update or dynamic fetch configurationscripts/mcp_client.py:598 · Auto-update or dynamic fetch configuration — agent may load new code at runtimeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Auto-update or dynamic fetch configurationscripts/mcp_client.py:565 · Auto-update or dynamic fetch configuration — agent may load new code at runtimeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Auto-update or dynamic fetch configurationscripts/mcp_client.py:563 · Auto-update or dynamic fetch configuration — agent may load new code at runtimeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Auto-update or dynamic fetch configurationscripts/mcp_client.py:1636 · Auto-update or dynamic fetch configuration — agent may load new code at runtimeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Auto-update or dynamic fetch configurationscripts/mcp_client.py:1032 · Auto-update or dynamic fetch configuration — agent may load new code at runtimeFix: Pin versions and sources; vendor anything fetched at install time.
AST06