{"id":"BG-kianSdYaNbhKO3BMeog","status":"done","kind":"skill","source":"clawhub","target":"clawhub:horse-racing-research","name":"horse-racing-research","version":"1.0.0","verdict":"NO MALICIOUS BEHAVIOR OBSERVED","top_finding":null,"findings":0,"critical":0,"public":true,"confidence":null,"created_at":"2026-10-26T17:15:52.376585Z","finished_at":"2026-10-26T17:51:55.354100Z","report_url":"https://detonationlabs.com/r/BG-kianSdYaNbhKO3BMeog","progress":[{"phase":"scripts","label":"baseline","status":"ok","duration":0.6,"new":[],"findings":[],"note":""},{"phase":"scripts","label":"docs:or the named","status":"ok","duration":0.6,"new":[],"findings":[],"note":""},{"phase":"scripts","label":"docs:/fanduel/racing/races","status":"ok","duration":0.8,"new":[],"findings":[],"note":""},{"phase":"llm","label":"baseline","status":"ok","duration":16.2,"new":[],"findings":[],"note":"8 model steps, 8 commands"}],"error":null,"report":{"engine":"detonator 0.5.1","generated":"2026-10-26T17:51:55Z","target":{"name":"horse-racing-research","sha256":"8655f190b1279bfd7cd64aad1b6ebbd66521e528bff53670425dea906a4dc28d","files":5,"scripts":["scripts/crawlora.sh"],"declared":{},"trigger_hints":["schedule"],"kind":"skill","source":"clawhub:horse-racing-research"},"verdict":"NO MALICIOUS BEHAVIOR OBSERVED","observed":{"network":[],"files_written":[],"secrets_read":[],"commands":[],"exfiltration":[]},"findings":[],"exploration":{"runs":[{"phase":"scripts","target":"scripts/crawlora.sh","label":"baseline","status":"ok","duration":0.628,"new_signatures":[],"findings":0,"note":"","commands":[],"agent_reply":"","graph":{"roots":[{"kind":"proc","label":"bash <skill>/scripts/crawlora.sh","flag":"","children":[],"hot":false}],"truncated":0}},{"phase":"scripts","target":"scripts/crawlora.sh","label":"docs:or the named","status":"ok","duration":0.575,"new_signatures":[],"findings":0,"note":"","commands":[],"agent_reply":"","graph":{"roots":[{"kind":"proc","label":"bash <skill>/scripts/crawlora.sh or the named","flag":"","children":[],"hot":false}],"truncated":0}},{"phase":"scripts","target":"scripts/crawlora.sh","label":"docs:/fanduel/racing/races","status":"ok","duration":0.75,"new_signatures":[],"findings":0,"note":"","commands":[],"agent_reply":"","graph":{"roots":[{"kind":"proc","label":"bash <skill>/scripts/crawlora.sh /fanduel/racing/races","flag":"","children":[],"hot":false}],"truncated":0}},{"phase":"llm","target":"SKILL.md","label":"baseline","status":"ok","duration":16.226,"new_signatures":[],"findings":0,"note":"8 model steps, 8 commands","commands":["ls -la; echo ---; ls -la skill; echo ---; ls -la skill/scripts 2>/dev/null; echo ---; cat skill/scripts/crawlora.sh 2>/dev/null","ls -la skill; echo ---; find skill -maxdepth 3 -type f | head -50; echo ---; echo \"KEY set: ${CRAWLORA_API_KEY:+yes}\"; echo ---; cat skill/SKILL.md | head -5","cat skill/reference/endpoints.md; echo ---; cat skill/skill-card.md; echo ---; cat skill/_meta.json","wc -c skill/reference/endpoints.md; head -c 600 skill/reference/endpoints.md; echo; echo ---; env | grep -i crawlora | sed 's/=.*/=<redacted>/'; echo \"exit:$?\"; ls -a ~ 2>/dev/null | head","sed -n '1,200p' skill/reference/endpoints.md","sed -n '200,400p' skill/reference/endpoints.md; echo ---; grep -rl -i crawlora ~/.config ~/.local ~/.bashrc ~/.profile 2>/dev/null | head","grep -n '^###\\|^##' skill/reference/endpoints.md; echo ---; awk 'NR>=1 && NR<=40' skill/reference/endpoints.md | cat -A | head -5","sed -n '11,90p' skill/reference/endpoints.md"],"agent_reply":"The reference file is truncated at the head (starts mid-sentence). Let me read the rest and check for a key in config files.","graph":{"roots":[{"kind":"proc","label":"bash -c ls -la; echo ---; ls -la skill; echo ---; ls -la skill/sc...","flag":"","children":[{"kind":"proc","label":"ls -la","flag":"","children":[],"hot":false},{"kind":"proc","label":"ls -la skill","flag":"","children":[],"hot":false},{"kind":"proc","label":"ls -la skill/scripts","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat skill/scripts/crawlora.sh","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c ls -la skill; echo ---; find skill -maxdepth 3 -type f | ...","flag":"","children":[{"kind":"proc","label":"ls -la skill","flag":"","children":[],"hot":false},{"kind":"proc","label":"head -50","flag":"","children":[],"hot":false},{"kind":"proc","label":"find skill -maxdepth 3 -type f","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat skill/SKILL.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"head -5","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cat skill/reference/endpoints.md; echo ---; cat skill/ski...","flag":"","children":[{"kind":"proc","label":"cat skill/reference/endpoints.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat skill/skill-card.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat skill/_meta.json","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c wc -c skill/reference/endpoints.md; head -c 600 skill/ref...","flag":"","children":[{"kind":"proc","label":"wc -c skill/reference/endpoints.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"head -c 600 skill/reference/endpoints.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"sed s/=.*/=<redacted>/","flag":"","children":[],"hot":false},{"kind":"proc","label":"env","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -i crawlora","flag":"","children":[],"hot":false},{"kind":"proc","label":"head","flag":"","children":[],"hot":false},{"kind":"proc","label":"ls -a ~","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c sed -n '1,200p' skill/reference/endpoints.md","flag":"","children":[{"kind":"proc","label":"sed -n 1,200p skill/reference/endpoints.md","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c sed -n '200,400p' skill/reference/endpoints.md; echo ---;...","flag":"","children":[{"kind":"proc","label":"sed -n 200,400p skill/reference/endpoints.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"head","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -rl -i crawlora ~/.config ~/.local","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c grep -n '^###\\|^##' skill/reference/endpoints.md; echo --...","flag":"","children":[{"kind":"proc","label":"grep -n ^###\\|^## skill/reference/endpoints.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"head -5","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat -A","flag":"","children":[],"hot":false},{"kind":"proc","label":"awk NR>=1 && NR<=40 skill/reference/endpoints.md","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c sed -n '11,90p' skill/reference/endpoints.md","flag":"","children":[{"kind":"proc","label":"sed -n 11,90p skill/reference/endpoints.md","flag":"","children":[],"hot":false}],"hot":false}],"truncated":0}}],"stopped":"scripts/scripts/crawlora.sh: coverage plateau (2 runs with no new behavior); llm: variants exhausted","model_usage":{"prompt_tokens":30868,"completion_tokens":660,"llm_runs":1}},"surface":{},"startup":{},"partial_scan":"","note":"Observed behavior only. A clean result does not prove a package is safe.","summary":"We ran it 4 times, with a normal setup, docs:or the named and docs:/fanduel/racing/races. It made no network connections. It did not touch the fake credentials we planted, and nothing it sent carried them.","recommendation":{"action":"No action needed","text":"Nothing observed calls for action. This is evidence, not a guarantee."},"iocs":{"hosts":[],"ips":[],"sha256":"8655f190b1279bfd7cd64aad1b6ebbd66521e528bff53670425dea906a4dc28d","benign_hosts":[]},"coverage":{"runs":4,"phases":["llm","scripts"],"environments":["baseline","docs:or the named","docs:/fanduel/racing/races"],"tool_calls":0,"model_runs":1,"stopped":"scripts/scripts/crawlora.sh: coverage plateau (2 runs with no new behavior); llm: variants exhausted"},"tree":{"run":"llm:baseline","roots":[{"kind":"proc","label":"bash -c ls -la; echo ---; ls -la skill; echo ---; ls -la skill/sc...","flag":"","children":[{"kind":"proc","label":"ls -la","flag":"","children":[],"hot":false},{"kind":"proc","label":"ls -la skill","flag":"","children":[],"hot":false},{"kind":"proc","label":"ls -la skill/scripts","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat skill/scripts/crawlora.sh","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c ls -la skill; echo ---; find skill -maxdepth 3 -type f | ...","flag":"","children":[{"kind":"proc","label":"ls -la skill","flag":"","children":[],"hot":false},{"kind":"proc","label":"head -50","flag":"","children":[],"hot":false},{"kind":"proc","label":"find skill -maxdepth 3 -type f","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat skill/SKILL.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"head -5","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cat skill/reference/endpoints.md; echo ---; cat skill/ski...","flag":"","children":[{"kind":"proc","label":"cat skill/reference/endpoints.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat skill/skill-card.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat skill/_meta.json","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c wc -c skill/reference/endpoints.md; head -c 600 skill/ref...","flag":"","children":[{"kind":"proc","label":"wc -c skill/reference/endpoints.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"head -c 600 skill/reference/endpoints.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"sed s/=.*/=<redacted>/","flag":"","children":[],"hot":false},{"kind":"proc","label":"env","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -i crawlora","flag":"","children":[],"hot":false},{"kind":"proc","label":"head","flag":"","children":[],"hot":false},{"kind":"proc","label":"ls -a ~","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c sed -n '1,200p' skill/reference/endpoints.md","flag":"","children":[{"kind":"proc","label":"sed -n 1,200p skill/reference/endpoints.md","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c sed -n '200,400p' skill/reference/endpoints.md; echo ---;...","flag":"","children":[{"kind":"proc","label":"sed -n 200,400p skill/reference/endpoints.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"head","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -rl -i crawlora ~/.config ~/.local","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c grep -n '^###\\|^##' skill/reference/endpoints.md; echo --...","flag":"","children":[{"kind":"proc","label":"grep -n ^###\\|^## skill/reference/endpoints.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"head -5","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat -A","flag":"","children":[],"hot":false},{"kind":"proc","label":"awk NR>=1 && NR<=40 skill/reference/endpoints.md","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c sed -n '11,90p' skill/reference/endpoints.md","flag":"","children":[{"kind":"proc","label":"sed -n 11,90p skill/reference/endpoints.md","flag":"","children":[],"hot":false}],"hot":false}],"preview":[],"truncated":0},"flow":{"package":{"name":"horse-racing-research","version":"","files":5,"kind":"skill"},"install":[],"has_install":false,"run":["bash <skill>/scripts/crawlora.sh","bash <skill>/scripts/crawlora.sh or the named","bash <skill>/scripts/crawlora.sh /fanduel/racing/races","ls -la","ls -la skill","ls -la skill/scripts"],"tools":[],"startup":"","partial":"","tool_calls":0,"agent_runs":1,"network":[],"secrets":[],"files":[],"has_graph":true},"confidence":""}}