turnstile-spin@r1

CAUTION

Publisher claims: "Set up, repair, or migrate to Cloudflare Turnstile bot verification in an existing frontend and backend, including server-side Siteverify." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher cloudflare · joined 2 days agoInstalls 91,572Last detonated 2 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsreferences/nextjs-app.md:107 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathstests/test_persist_skill.py:42 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/nextjs-app.md:159 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/astro.md:7 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsSKILL.md:106 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Prompting user to enter sensitive credentialsSKILL.md:52 · Prompting user to enter sensitive credentials — social engineering

AST03

CRITICAL

Access to sensitive file pathsreferences/nextjs-pages.md:56 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/astro.md:64 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/nextjs-pages.md:34 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsSKILL.md:89 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Python subprocess execution detectedtests/test_persist_skill.py:39 · Python subprocess execution detected

AST05

CRITICAL

Access to sensitive file pathsreferences/astro.md:93 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/vanilla-html.md:50 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/astro.md:32 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/sveltekit.md:109 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/nextjs-app.md:89 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/vanilla-html.md:38 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/nextjs-app.md:140 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathstests/test_persist_skill.py:36 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/astro.md:47 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsSKILL.md:127 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05