Skills/npm/agent-hooks

agent-hooks@1.9.90

CAUTION

Publisher claims: "Human-in-the-loop (HITL) for AI agents: ask a person for approvals or answers by push notification. One command connects Claude Code, Codex, Cursor, Gemini CLI and more." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher pushary · joined 0 days agoInstalls 16,604Last detonated 51 min ago
Dispute verdict

Behavior trace

Honeypot run · 1 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.6sprocessdependency install exit 1
0.7sprocessexec /usr/bin/timeout
0.7sprocessexited 1: Node.js v22.23.4
0.7sclaimedno tools/list reply (exit 1)
0.7sprocessscript backend runs setup only

Static findings

HIGH
npx invocation of non-well-known packageREADME.md:12 · npx invocation of non-well-known package — may execute untrusted code
AST06
CRITICAL
Destructive file system command detecteddist/chunk-2U6FPMXG.js:1821 · Destructive file system command detected
AST05
HIGH
Process kill commanddist/chunk-OH67LB2U.js:919 · Process kill command — agent can terminate processes
AST05
HIGH
Auto-update or dynamic fetch configurationdist/chunk-APT7KJ5I.js:203 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06
MEDIUM
File type combined with upload actionREADME.md:302 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packagedist/chunk-2U6FPMXG.js:1821 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:33 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:100 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
MCP server using network transport (SSE/HTTP)dist/chunk-7EGNVZLK.js:656 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
npx invocation of non-well-known packageREADME.md:94 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Process kill commanddist/chunk-JQUMX7YZ.js:997 · Process kill command — agent can terminate processes
AST05
HIGH
Auto-update or dynamic fetch configurationdist/chunk-APT7KJ5I.js:183 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06
HIGH
Python subprocess execution detecteddist/chunk-2U6FPMXG.js:1111 · Python subprocess execution detected
AST05
HIGH
npx invocation of non-well-known packagedist/chunk-J42EAEX3.js:17 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Auto-update or dynamic fetch configurationdist/chunk-CDBGZWPY.js:98 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06
HIGH
Auto-update or dynamic fetch configurationdist/chunk-CDBGZWPY.js:105 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06
MEDIUM
File type combined with upload actionREADME.md:53 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packageREADME.md:83 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedist/chunk-QUKDNQ4L.js:535 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Auto-update or dynamic fetch configurationdist/chunk-APT7KJ5I.js:237 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06
HIGH
Python subprocess execution detecteddist/chunk-2U6FPMXG.js:1268 · Python subprocess execution detected
AST05
HIGH
Auto-update or dynamic fetch configurationREADME.md:302 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06
MEDIUM
File type combined with upload actiondist/chunk-EFQQLEWW.js:289 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packagedist/chunk-INNH7EUK.js:1231 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Process kill commanddist/chunk-INNH7EUK.js:1621 · Process kill command — agent can terminate processes
AST05
HIGH
npx invocation of non-well-known packagedist/chunk-2U6FPMXG.js:971 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Auto-update or dynamic fetch configurationREADME.md:298 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06
HIGH
Auto-update or dynamic fetch configurationdist/chunk-CDBGZWPY.js:102 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06
HIGH
Auto-update or dynamic fetch configurationdist/chunk-CDBGZWPY.js:60 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06
HIGH
Auto-update or dynamic fetch configurationdist/chunk-APT7KJ5I.js:193 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06
HIGH
Auto-update or dynamic fetch configurationdist/chunk-7EGNVZLK.js:1091 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06
HIGH
Process kill commanddist/chunk-INNH7EUK.js:1581 · Process kill command — agent can terminate processes
AST05
HIGH
Instructs the agent to modify its persistent memory or instruction filesdist/chunk-J42EAEX3.js:71 · Instructs the agent to modify its persistent memory or instruction files
AST01
HIGH
Auto-update or dynamic fetch configurationdist/chunk-CDBGZWPY.js:96 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06