wizard@r1

CAUTION

Publisher claims: "Generate an interactive bash wizard that walks a human through steps only they can perform. Use when provisioning infrastructure, setting up credentials or CI secrets, walking an unfamiliar third-party dashboard, or running a one-off migration or cutover. Don't invoke this for steps the agent can perform itself." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher mattpocock · joined 302 days agoInstalls 552KLast detonated 43 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

File permission modification commandSKILL.md:42 · File permission modification command — agent changes file ownership/permissions

AST05

CRITICAL

Access to sensitive file pathstemplate.sh:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Prompting user to enter sensitive credentialstemplate.sh:214 · Prompting user to enter sensitive credentials — social engineering

AST03

CRITICAL

Access to sensitive file pathsSKILL.md:20 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsSKILL.md:8 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathstemplate.sh:106 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsSKILL.md:10 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05