xiaoai-bridge@1.2.0

CAUTION

Publisher claims: "小米小爱音箱语音指令桥接。截取小爱音箱的语音消息，转换为 AI 助手指令，并通过 TTS 回复。支持触发词过滤、自动去重、后台监听。适用于通过小爱音箱语音控制 OpenClaw 助手、智能家居联动、语音任务执行等场景。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher warm-winter · joined 1 days agoInstalls 1,727Last detonated 35 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsSKILL.md:46 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/debug-fetch.js:27 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Credential pass-through configurationreferences/migpt-api.md:22 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Credential pass-through configurationSKILL.md:82 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Credential pass-through configurationSECURITY.md:31 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Access to sensitive file pathsSKILL.md:43 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Credential pass-through configurationSECURITY.md:22 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Credential pass-through configurationreferences/migpt-api.md:29 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Credential pass-through configurationreferences/migpt-api.md:14 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Access to sensitive file pathsCHANGELOG.md:28 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Credential pass-through configurationSECURITY.md:29 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Access to sensitive file pathsSKILL.md:21 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Credential pass-through configurationSECURITY.md:46 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Credential pass-through configurationSECURITY.md:19 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Access to sensitive file pathsCHANGELOG.md:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Credential pass-through configurationSKILL.md:83 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Access to sensitive file pathsSECURITY.md:18 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Credential pass-through configurationSKILL.md:91 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Access to sensitive file pathsSECURITY.md:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsCHANGELOG.md:30 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/debug-fetch.js:62 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsCHANGELOG.md:17 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Credential pass-through configurationSKILL.md:28 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Credential pass-through configurationSKILL.md:79 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Access to sensitive file pathsscripts/lib/env.js:4 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Credential pass-through configurationscripts/debug-fetch.js:38 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Credential pass-through configurationscripts/lib/core.js:59 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Access to sensitive file pathsscripts/lib/env.js:2 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Credential pass-through configurationscripts/lib/state.js:893 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Credential pass-through configurationscripts/lib/core.js:79 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Credential pass-through configurationscripts/lib/core.js:61 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Credential pass-through configurationscripts/lib/core.js:62 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Access to sensitive file pathsscripts/lib/state.js:91 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/lib/env.js:8 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/lib/state.js:132 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/lib/core.js:46 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Credential pass-through configurationscripts/lib/state.js:4 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Access to sensitive file pathsscripts/lib/env.js:9 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/lib/state.js:313 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Credential pass-through configurationscripts/debug-fetch.js:46 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Credential pass-through configurationscripts/lib/core.js:7 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Credential pass-through configurationscripts/lib/env.js:8 · Credential pass-through configuration — agent relays sensitive credentials

AST02

HIGH

File permission modification commandCHANGELOG.md:12 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

File permission modification commandCHANGELOG.md:27 · File permission modification command — agent changes file ownership/permissions

AST05

CRITICAL

Credential pass-through configurationscripts/xiaoai-listen.js:125 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Access to sensitive file pathsscripts/xiaoai-listen.js:301 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

File permission modification commandSKILL.md:129 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

File permission modification commandCHANGELOG.md:34 · File permission modification command — agent changes file ownership/permissions

AST05

CRITICAL

Credential pass-through configurationscripts/lib/state.js:1032 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Access to sensitive file pathsscripts/xiaoai-listen.js:244 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Credential pass-through configurationscripts/xiaoai-listen.js:135 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Credential pass-through configurationscripts/xiaoai-listen.js:296 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Credential pass-through configurationscripts/lib/state.js:941 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Credential pass-through configurationscripts/xiaoai-listen.js:10 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Access to sensitive file pathsscripts/xiaoai-listen.js:60 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Credential pass-through configurationscripts/lib/state.js:915 · Credential pass-through configuration — agent relays sensitive credentials

AST02

HIGH

File permission modification commandSECURITY.md:65 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

File permission modification commandscripts/lib/state.js:431 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

File permission modification commandscripts/lib/state.js:7 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

File permission modification commandSKILL.md:477 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

File permission modification commandSKILL.md:464 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

File permission modification commandscripts/lib/state.js:435 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

File permission modification commandscripts/lib/state.js:206 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

File permission modification commandscripts/lib/state.js:915 · File permission modification command — agent changes file ownership/permissions

AST05