higgsfield-websites@0.13.0

CAUTION

Publisher claims: "Build, edit, and deploy full-stack websites, apps and games via the Higgsfield CLI (`higgsfield website …`). Each is a React 19 + TanStack Start SSR app in one Cloudflare Worker (D1/R2/KV/DO/Containers). THREE product types, picked via `--type` on create: `website` (standalone, no Higgsfield integration — references/website-flow.md), `app` (Sign in with Higgsfield + fnf SDK, Quanta — references/app-flow.md), `game` (realtime multiplayer rooms — references/game-flow.md). Routes to the right flow; each carries its own rules and deploy/publish gates. Use when: "build me a website", "make a landing page", "create a web app", "build a SaaS dashboard / portfolio", "make me a game", "deploy this site", "publish". Also owns GAME ART: "make a spritesheet", "tileable texture", "animate a 3D character", game music/SFX — see the game-* references. NOT for: single image/video/audio generation (higgsfield-generate), product photos (higgsfield-product-photoshoot), marketplace cards (higgsfield-marketplace-cards). " Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher higgsfield-ai · joined 2 days agoInstalls 132KLast detonated 35 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Fake instruction boundary tagreferences/design-taste-frontend.md:910 · Fake instruction boundary tag

AST01

CRITICAL

Pipe-to-shell patternSKILL.md:102 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

CRITICAL

Destructive file system command detectedreferences/containers.md:49 · Destructive file system command detected

AST05

CRITICAL

Access to sensitive file pathsreferences/fnf-sdk.md:367 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packagereferences/wow-maker.md:237 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Process kill commandreferences/containers.md:223 · Process kill command — agent can terminate processes

AST05

HIGH

Outbound HTTP to raw IP addressreferences/security.md:228 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packagereferences/wow-maker.md:243 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Access to sensitive file pathsreferences/fnf-sdk.md:366 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/security.md:787 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Process kill commandreferences/design-taste-frontend.md:603 · Process kill command — agent can terminate processes

AST05

HIGH

npx invocation of non-well-known packagereferences/design-taste-frontend.md:117 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagereferences/wow-maker.md:240 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagereferences/design-taste-frontend.md:1024 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Authorization escalation languagereferences/security.md:270 · Authorization escalation language

AST01

CRITICAL

Credential pass-through configurationreferences/runtime-and-infra.md:29 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Access to sensitive file pathsreferences/security.md:626 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Direct script execution from GitHub raw URLSKILL.md:102 · Direct script execution from GitHub raw URL — unverified code source

AST06

HIGH

npx invocation of non-well-known packagereferences/design-taste-frontend.md:1025 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

URL using raw IP addressreferences/security.md:228 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

File type combined with upload actionreferences/runtime-and-infra.md:189 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionreferences/website-flow.md:434 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionreferences/containers.md:216 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionreferences/containers.md:272 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionreferences/design-taste-frontend.md:175 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionreferences/game-design-system.md:8 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

npx invocation of non-well-known packagereferences/wow-maker.md:246 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

Remote installer piped to shellSKILL.md:102 · Remote installer piped to shell

AST07

HIGH

npx invocation of non-well-known packagereferences/wow-maker.md:249 · npx invocation of non-well-known package — may execute untrusted code

AST06