appwrite@0.2.0

CAUTION

Publisher claims: "Appwrite tools for Claude Code, including SDK skills, Appwrite MCP servers, and deployment commands." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Claude Code plugin marketplacePublisher appwrite · joined 0 days agoInstalls 0Last detonated 54 min ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

Access to sensitive file pathsskills/cli/SKILL.md:285 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

File type combined with upload actionskills/cli/SKILL.md:278 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

Remote installer piped to shellskills/cli/SKILL.md:20 · Remote installer piped to shell

AST07

HIGH

npx invocation of non-well-known packageskills/typescript/SKILL.md:94 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Access to sensitive file pathsskills/cli/SKILL.md:278 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

File type combined with upload actionskills/cli/SKILL.md:383 · File type combined with upload action — agent may exfiltrate local data files

AST07

CRITICAL

Pipe-to-shell patternskills/cli/SKILL.md:20 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

HIGH

Access to sensitive file pathsskills/cli/SKILL.md:383 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/cli/SKILL.md:281 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05