Skills/skills.sh/hallmark

hallmark@2.0.0

CAUTION

Publisher claims: "Design skill for websites and new pages that look designed, not generated. Use when the user asks to build or design something new, or names Hallmark. Never use it on an existing design unless the user names Hallmark, as in `/hallmark redesign <path>`." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher nutlope · joined 1 days agoInstalls 66,504Last detonated 17 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Fake instruction boundary tagreferences/comp.md:27 · Fake instruction boundary tag
AST01
HIGH
URL with embedded credentialsreferences/themes/brutal.md:81 · URL with embedded credentials — may be phishing or credential leaking
AST07
HIGH
URL with embedded credentialsreferences/themes/bloom.md:91 · URL with embedded credentials — may be phishing or credential leaking
AST07
HIGH
URL with embedded credentialsreferences/themes/broadside.md:93 · URL with embedded credentials — may be phishing or credential leaking
AST07
CRITICAL
Fake instruction boundary tagSKILL.md:4 · Fake instruction boundary tag
AST01
CRITICAL
Fake instruction boundary tagreferences/comp.md:101 · Fake instruction boundary tag
AST01
CRITICAL
Fake instruction boundary tagreferences/flow.md:87 · Fake instruction boundary tag
AST01
HIGH
URL with embedded credentialsreferences/themes/almanac.md:85 · URL with embedded credentials — may be phishing or credential leaking
AST07
HIGH
URL with embedded credentialsreferences/themes/atelier.md:85 · URL with embedded credentials — may be phishing or credential leaking
AST07
HIGH
URL with embedded credentialsreferences/themes/blueprint.md:89 · URL with embedded credentials — may be phishing or credential leaking
AST07
HIGH
URL with embedded credentialsreferences/themes/arcade.md:84 · URL with embedded credentials — may be phishing or credential leaking
AST07
MEDIUM
File type combined with upload actionSKILL.md:80 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/imagery.md:53 · File type combined with upload action — agent may exfiltrate local data files
AST07