twombly@0.4.12
VERIFIED· install onlyPublisher claims: "A canvas for your coding agent's design explorations. Each version becomes a live frame; share one link for cursors, comments and huddles." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry npm (MCP server)Publisher github actions · publishing for 414 daysInstalls 4,612Last detonated 6d ago
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-08 and scored it 81/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run
Static findings
LOW
HTML comment carrying imperative instructions to the agentdist/ui/index.html:34 · HTML comment carrying imperative instructions to the agent · informational: not an instruction file · informational: not an instruction file
AST01For agents and search engines that don't run scripts. The app replaces it on its first render.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.HIGH
Access to sensitive file pathsdist/cli.js:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05{ test: /(^|\/)\.env(\.|$)/i, code: "ENV_FILE", what: "an environment file" },Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
File type combined with upload actiondist/ui/assets/index-C18OZf9t.js:9 · File type combined with upload action — agent may exfiltrate local data files
AST07…nstable_NormalPriority,Re=t.unstable_LowPriority,ze=t.unstable_IdlePriority,Be=t.log,Ve=t.unstable_setDisableYieldValue,He=null,Ue=null;function We(e){if(typeof Be==`function`&&Ve(e),Ue&&typeof Ue.setStrictMode==`function`)try{Ue.setStrict…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
File type combined with upload actiondist/cli.js:37 · File type combined with upload action — agent may exfiltrate local data files
AST07…and out files. Delete it from the folder." }, { test: /(^|\/)(package(-lock)?\.json|pnpm-lock\.yaml|yarn\.lock|bun\.lockb?|tsconfig\.json|wrangler\.(toml|jsonc?)|dockerfile|docker-compose\.ya?ml)$/i, code: "PROJECT_FILE", what: "a project …Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
npx invocation of non-well-known packagedist/cli.js:2426 · npx invocation of non-well-known package — may execute untrusted code
AST06return { ok: false, warnings, problems: [{ code: "NO_BROWSER", message: "No browser available to check the frame.", fix: "Install Google Chrome, or run: npx playwright-core install chromium" }] };Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagedist/cli.js:375 · npx invocation of non-well-known package — may execute untrusted code
AST06…dd, update or move appears for everyone straight away.\n\nRun every command as `npx -y twombly@latest <command>`; this guide shortens that to `twombly <command>`. Out…Fix: Pin versions and sources; vendor anything fetched at install time.HIGH
Access to sensitive file pathsdist/cli.js:70 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05var PLACEHOLDER = /^(?:x+|your|example|placeholder|test|mock|demo|fake|dummy|sample|<|\$\{|process\.env|import\.meta)/i;Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
npx invocation of non-well-known packagedist/ui/skill.md:6 · npx invocation of non-well-known package — may execute untrusted code
AST06Run `npx -y twombly@latest guide` and follow it.Fix: Pin versions and sources; vendor anything fetched at install time.HIGH
Access to sensitive file pathsdist/cli.js:29 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05{ test: /(^|\/)(\.npmrc|\.netrc|\.pypirc|\.htpasswd|credentials(\.json)?|secrets?\.(json|ya?ml|toml)|service[-_]?account.*\.json)$/i, code: "CREDENTIAL_FILE", what: "a credentials file" },Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
npx invocation of non-well-known packagedist/ui/assets/index-C18OZf9t.js:10 · npx invocation of non-well-known package — may execute untrusted code
AST06…ueWithCleanup(`titleElementId`,c),Gn(`h2`,e,{ref:t,props:[{id:c},o]})}),kf=`Run npx skills add materic-inc/twombly-skill -g -y, then use the Twombly skill to put this pro…Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
File type combined with upload actiondist/ui/assets/Faces-DUhcYuuM.js:1 · File type combined with upload action — agent may exfiltrate local data files
AST07…rs:{...t?.body?{"content-type":`application/json`}:{},...t?.headers}}),r=await n.json().catch(()=>({}));if(!n.ok)throw Object.assign(Error(r.error||`Failed (${n.status})`),{status:n.status});return r}function o(e,t){fetch(e,{method:`POST`,…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
npx invocation of non-well-known packagedist/cli.js:1058 · npx invocation of non-well-known package — may execute untrusted code
AST06return `twombly ${version} is out and this is ${"0.4.12"}. Run every command as npx -y twombly@latest <command>.`;Fix: Pin versions and sources; vendor anything fetched at install time.HIGH
Access to sensitive file pathsdist/cli.js:375 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05…n- **Environment values:** never include them. Build with none set. Don't copy `.env` files. If the build needs a value to compile, use an obviously fake one. **Nev…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
File type combined with upload actiondist/cli.js:375 · File type combined with upload action — agent may exfiltrate local data files
AST07…ses, source maps, server code, `node_modules` and project files such as `package.json`. Pop-ups are off. If the design uses the camera or microphone, add it with `--devices camera`, `--devices microphone` or `--devices camera,microphone`; …Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.Cost to the agent
Instructions loaded
≈150 tok
2 files · 23 in bundle
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
No advisories in OSV for twombly@0.4.12 as of 6d ago. This is the package itself, not its dependencies.