Skills/ClawHub/zl-clawpay

zl-clawpay@1.0.8

VERIFIED· install only

Publisher claims: "支付技能：支持免密支付、订单查询、交易流水等功能。 触发词：我要支付、帮我付款、确认买单、查询支付订单、查询订单状态、查询交易流水、查询交易记录、查询账单、绑定子钱包、验证钱包凭据、解绑子钱包、撤销钱包绑定。 不适用于：非支付场景、历史数据导出、批量操作、余额查询、收款码生成。 基于 Node.js 实现，使用 SM2/SM3/SM4 国密算法加密通信。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher kevindagege · publishing for 166 daysInstalls 1,503Last detonated 8d ago
$clawhub install zl-clawpay
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-07 and scored it 87/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
Access to sensitive file pathsscripts/config.js:17 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files` Fix: Copy config/.env.example to config/.env and fill in the values.\n` +Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/config.js:7 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconst ENV_PATH = path.join(__dirname, '..', 'config', '.env');Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/config.js:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files` Fix: Ensure pack-skill.ps1 includes config/.env in the package.\n` +Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/skill.js:118 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files`Platform config file not found: config/.env\n` +Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/skill.js:115 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconst configEnvPath = path.join(__dirname, '..', 'config', '.env');Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/skill.js:120 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files` Fix: Copy config/.env.example to config/.env, or re-package with pack-skill.ps1.`Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/config.js:16 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files` 2. Manual installation — config/.env was not copied.\n` +Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05

Cost to the agent

Instructions loaded
≈1,804 tok
1 file · 20 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.