yq-minimax-docx@1.0.0
CAUTION· static onlyPublisher claims: "Professional DOCX document creation, editing, and formatting using OpenXML SDK (.NET). Three pipelines: (A) create new documents from scratch, (B) fill/edit..." Observed in sandbox: static analysis only — behavior not yet observed.
Coverage
Static only; nothing was run yet.The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.
Is [email protected] safe to install?
KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-14 and scored it 61/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Privileged sudo command; Privileged sudo command; Privileged sudo command. Summary: static analysis only — behavior not yet observed.
Behavior trace
Queued for honeypot run · static analysis onlyt+CategoryObserved action
This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.
Static findings
MEDIUM
File permission modification commandscripts/env_check.sh:175 · File permission modification command — agent changes file ownership/permissions
AST05echo " Fix: chmod +x scripts/*.sh"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.HIGH
Privileged sudo commandscripts/setup.sh:120 · Privileged sudo command — agent may execute with elevated privileges
AST05sudo pacman -S --noconfirm dotnet-sdkFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Privileged sudo commandscripts/env_check.sh:102 · Privileged sudo command — agent may execute with elevated privileges
AST05linux|wsl) echo " Install: sudo apt-get install pandoc # or dnf/pacman" ;;Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
File permission modification commandscripts/setup.sh:309 · File permission modification command — agent changes file ownership/permissions
AST05log "chmod +x $(basename "$s")"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.MEDIUM
File permission modification commandscripts/setup.sh:138 · File permission modification command — agent changes file ownership/permissions
AST05chmod +x /tmp/dotnet-install.shFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.MEDIUM
File permission modification commandscripts/env_check.sh:41 · File permission modification command — agent changes file ownership/permissions
AST05echo " chmod +x /tmp/dotnet-install.sh && /tmp/dotnet-install.sh --channel 8.0"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.HIGH
Privileged sudo commandscripts/setup.sh:108 · Privileged sudo command — agent may execute with elevated privileges
AST05sudo apt-get install -y -qq wget apt-transport-httpsFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Privileged sudo commandscripts/setup.sh:117 · Privileged sudo command — agent may execute with elevated privileges
AST05sudo dnf install -y dotnet-sdk-8.0Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Privileged sudo commandscripts/env_check.sh:42 · Privileged sudo command — agent may execute with elevated privileges
AST05echo " # Option 2 (Ubuntu/Debian): sudo apt-get install -y dotnet-sdk-8.0"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Privileged sudo commandscripts/setup.sh:123 · Privileged sudo command — agent may execute with elevated privileges
AST05sudo zypper install -y dotnet-sdk-8.0Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Privileged sudo commandscripts/env_check.sh:130 · Privileged sudo command — agent may execute with elevated privileges
AST05linux|wsl) echo " Install: sudo apt-get install libreoffice-core" ;;Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
File permission modification commandscripts/setup.sh:308 · File permission modification command — agent changes file ownership/permissions
AST05chmod +x "$s"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.HIGH
Privileged sudo commandscripts/setup.sh:107 · Privileged sudo command — agent may execute with elevated privileges
AST05sudo apt-get update -qqFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
File permission modification commandscripts/setup.sh:110 · File permission modification command — agent changes file ownership/permissions
AST05chmod +x /tmp/dotnet-install.shFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.Cost to the agent
Instructions loaded
≈4,042 tok
1 file · 66 in bundle
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.
What would make this Verified
19 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%- Unclaimed publisher≈ +8 on the totalClaim tianheihei002: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
- Privileged sudo command≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
- File permission modification command≈ +2 on the totalRequest the narrowest permission that works; replace wildcards with the exact paths or hosts.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim tianheihei002Propose a patch to the maintainer