xtaste@0.1.2

CAUTION

Publisher claims: "Remember your taste once — every AI after that knows it. Learns the user's personal taste (visual design, writing, naming, code style, way of working, product trade-offs) from a 5-minute local quiz plus their later reactions, and applies it. Use before designing UI, writing copy, naming things or making aesthetic/product choices for the user, and whenever the user reacts to an output with likes, dislikes or corrections. Once installed it acts automatically: on first use it opens a local quiz page in the browser (once; not again for 7 days if ignored), and it records the user's taste statements to ~/.xtaste without asking each time (`xtaste pause` stops recording). Optional and only on the user's request: importing low-weight hints from a local Dongwo (懂我) prompt inbox." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher cutd · joined 2 days agoInstalls 38Last detonated 39 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
URL using raw IP addressscripts/xtaste.py:887 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
Outbound HTTP to raw IP addressscripts/xtaste.py:887 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Python subprocess execution detectedscripts/xtaste.py:78 · Python subprocess execution detected
AST05
HIGH
Outbound HTTP to raw IP addressscripts/xtaste.py:853 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
MEDIUM
URL using raw IP addressscripts/xtaste.py:853 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
Python subprocess execution detectedscripts/xtaste.py:882 · Python subprocess execution detected
AST05