Is trip-moments-skill@1.4.0 safe to install?

Skills/npm/trip-moments-skill

trip-moments-skill@1.4.0

CAUTION

Publisher claims: "AI 朋友圈旅行出图助手 (trip-moments skill) — 工业级全流程旅行摄影智能出图与朋友圈九宫格套件" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher zichuanlan · joined 0 days agoInstalls 1,070Last detonated 4 h ago

What would fix this Watch Dispute verdict

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-04 and scored it 61/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Pipe-to-shell pattern; OS command execution function call detected; Outbound HTTP to raw IP address. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 1 s · 1 scenarios

t+CategoryObserved action

1.0sfilesystemread ~/.agents/skills/trip-moments/scripts/selftest.py · ~/.agents/skills/trip-moments/scripts outside project

1.0sfilesystemwrote ~/.agents/skills/trip-moments/SKILL.md · ~/.agents/skills/trip-moments/assets/photo-abstract-editorial/PROVENANCE.md · ~/.agents/skills/trip-moments/assets/photo-abstract-editorial/prompt-zh.md · ~/.agents/skills/trip-moments/references/ai-apis.md · ~/.agents/skills/trip-moments/references/amap-geo.md · ~/.agents/skills/trip-moments/references/api-config.md

1.0sprocessexec /usr/bin/dirname

1.0sprocessscript backend runs setup only

1.1sprocessscript backend runs setup only

Static findings

HIGH

Pipe-to-shell pattern.agents/skills/trip-moments/SKILL.md:325 · Pipe-to-shell pattern — downloads and immediately executes remote codeFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST06

CRITICAL

OS command execution function call detected.agents/skills/trip-moments/scripts/check_env.py:195 · OS command execution function call detectedFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.

AST05

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/scripts/agent_ui.py:94 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/SKILL.md:105 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/scripts/agent_transport.py:53 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/SKILL.md:37 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/SKILL.md:68 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/scripts/agent_session.py:56 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/SKILL.md:322 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/SKILL.md:108 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/scripts/agent_session.py:85 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Access to sensitive file paths.agents/skills/trip-moments/scripts/agent_transport.py:41 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/scripts/clawbridge.py:183 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/scripts/clawbridge.py:532 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/scripts/clawbridge.py:606 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/scripts/agent_ui.py:329 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/scripts/review.py:265 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/scripts/review_template.py:16 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/scripts/review.py:252 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

URL with embedded credentials.agents/skills/trip-moments/scripts/selftest.py:412 · URL with embedded credentials — may be phishing or credential leakingFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/scripts/review.py:228 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/scripts/review.py:247 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/scripts/studio.py:4487 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/scripts/selftest.py:606 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/scripts/studio.py:2414 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/scripts/studio.py:4123 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

URL using raw IP address.agents/skills/trip-moments/SKILL.md:37 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/scripts/selftest.py:1500 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/scripts/selftest.py:624 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/scripts/selftest.py:424 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/scripts/studio.py:2974 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/scripts/selftest.py:1488 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP address.agents/skills/trip-moments/scripts/studio.py:3419 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

URL using raw IP address.agents/skills/trip-moments/scripts/agent_session.py:85 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

File type combined with upload action.agents/skills/trip-moments/scripts/grid9.py:50 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

URL using raw IP address.agents/skills/trip-moments/scripts/review.py:247 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

URL using raw IP address.agents/skills/trip-moments/scripts/clawbridge.py:183 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

URL using raw IP address.agents/skills/trip-moments/scripts/agent_session.py:56 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

Python subprocess execution detected.agents/skills/trip-moments/scripts/review.py:304 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

URL using raw IP address.agents/skills/trip-moments/scripts/agent_transport.py:53 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

URL using raw IP address.agents/skills/trip-moments/scripts/agent_ui.py:94 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

URL using raw IP address.agents/skills/trip-moments/scripts/clawbridge.py:532 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

URL using raw IP address.agents/skills/trip-moments/scripts/clawbridge.py:606 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

URL using raw IP address.agents/skills/trip-moments/SKILL.md:322 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

Process kill command.agents/skills/trip-moments/scripts/aiops.py:527 · Process kill command — agent can terminate processesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.

AST05

MEDIUM

URL using raw IP address.agents/skills/trip-moments/SKILL.md:105 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

Python subprocess execution detected.agents/skills/trip-moments/scripts/agent_transport.py:203 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

URL using raw IP address.agents/skills/trip-moments/scripts/review.py:252 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

URL using raw IP address.agents/skills/trip-moments/scripts/agent_ui.py:329 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

URL using raw IP address.agents/skills/trip-moments/scripts/review.py:228 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

URL using raw IP address.agents/skills/trip-moments/SKILL.md:68 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

Python subprocess execution detected.agents/skills/trip-moments/scripts/agent_transport.py:461 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

URL using raw IP address.agents/skills/trip-moments/SKILL.md:108 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

URL using raw IP address.agents/skills/trip-moments/scripts/selftest.py:424 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

URL using raw IP address.agents/skills/trip-moments/scripts/review.py:265 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

URL using raw IP address.agents/skills/trip-moments/scripts/selftest.py:1488 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

URL using raw IP address.agents/skills/trip-moments/scripts/selftest.py:624 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

Python subprocess execution detected.agents/skills/trip-moments/scripts/selftest.py:3078 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

URL using raw IP address.agents/skills/trip-moments/scripts/selftest.py:1500 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

Python subprocess execution detected.agents/skills/trip-moments/scripts/selftest.py:1855 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

URL using raw IP address.agents/skills/trip-moments/scripts/selftest.py:606 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

Python subprocess execution detected.agents/skills/trip-moments/scripts/selftest.py:1830 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

URL using raw IP address.agents/skills/trip-moments/scripts/review_template.py:16 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

Python subprocess execution detected.agents/skills/trip-moments/scripts/studio.py:4008 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detected.agents/skills/trip-moments/scripts/studio.py:4336 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

URL using raw IP address.agents/skills/trip-moments/scripts/studio.py:3419 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

npx invocation of non-well-known packagebin/install.js:100 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

Python subprocess execution detected.agents/skills/trip-moments/scripts/studio.py:4011 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

URL using raw IP address.agents/skills/trip-moments/scripts/studio.py:2974 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

URL using raw IP address.agents/skills/trip-moments/scripts/studio.py:4123 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

npx invocation of non-well-known packagebin/install.js:10 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagebin/install.js:117 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagebin/install.js:116 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

Process kill command.agents/skills/trip-moments/scripts/studio.py:379 · Process kill command — agent can terminate processesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.

AST05

MEDIUM

URL using raw IP address.agents/skills/trip-moments/scripts/studio.py:4487 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

File type combined with upload action.agents/skills/trip-moments/scripts/vendor/leaflet/leaflet.js:5 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

URL using raw IP address.agents/skills/trip-moments/scripts/studio.py:2414 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

npx invocation of non-well-known packagebin/install.js:118 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.

AST06

What would make this Verified

19 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%

OS command execution function call detected≈ +9 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
Unclaimed publisher≈ +8 on the totalClaim zichuanlan: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
Touches files outside the project≈ +7 on the totalKeep reads and writes inside the working directory, or declare the exact paths in `filesystem:` and explain why in the README.
Pipe-to-shell pattern≈ +4 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
Outbound HTTP to raw IP address≈ +4 on the totalReplace encoded or assembled strings with plain literals and remove undeclared network calls.
Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

Publish a new version to npm, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim zichuanlan