{"id":"HZNQvCcR9lBfqHz7yGUvug","status":"done","kind":"skill","source":"clawhub","target":"clawhub:video-overloaded-shot-split-cn","name":"video-overloaded-shot-split-cn","version":"1.0.1","verdict":"NO MALICIOUS BEHAVIOR OBSERVED","top_finding":null,"findings":0,"critical":0,"public":true,"confidence":null,"created_at":"2026-10-27T11:18:04.581670Z","finished_at":"2026-10-27T11:18:38.443736Z","report_url":"https://detonationlabs.com/r/HZNQvCcR9lBfqHz7yGUvug","progress":[{"phase":"scripts","label":"baseline","status":"ok","duration":2.0,"new":[],"findings":[],"note":""},{"phase":"scripts","label":"guided:BASH_SOURCE","status":"ok","duration":0.5,"new":[],"findings":[],"note":""},{"phase":"scripts","label":"ci-github","status":"ok","duration":2.0,"new":[],"findings":[],"note":""},{"phase":"llm","label":"baseline","status":"ok","duration":11.7,"new":[],"findings":[],"note":"5 model steps, 4 commands"}],"error":null,"report":{"engine":"detonator 0.5.1","generated":"2026-10-27T11:18:38Z","target":{"name":"video-overloaded-shot-split-cn","sha256":"0b63c305ef06b3a4b79f69e43af38b640c50cc213510e2da6dbad58543e65c0d","files":17,"scripts":["scripts/self-test.sh"],"declared":{},"trigger_hints":[],"kind":"skill","source":"clawhub:video-overloaded-shot-split-cn"},"verdict":"NO MALICIOUS BEHAVIOR OBSERVED","observed":{"network":[],"files_written":[],"secrets_read":[],"commands":[],"exfiltration":[]},"findings":[],"exploration":{"runs":[{"phase":"scripts","target":"scripts/self-test.sh","label":"baseline","status":"ok","duration":2.042,"new_signatures":[],"findings":0,"note":"","commands":[],"agent_reply":"","graph":{"roots":[{"kind":"proc","label":"bash <skill>/scripts/self-test.sh","flag":"","children":[{"kind":"proc","label":"dirname <skill>/scripts/self-test.sh","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q ^name: video-overloaded-shot-split-cn$ SKILL.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q ^name: video-overloaded-shot-split-cn$ manifest.yaml","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q ^slug: video-overloaded-shot-split-cn$ manifest.yaml","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q ^icon: icon-512.png$ manifest.yaml","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q allow_implicit_invocation: true agents/openai.yaml","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q 成功样例 README.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q npx skills add xxjrq/video-overloaded-shot-split-cn README.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q 不补充存储卡的藏放位置、状态或持拿方式 fixtures/success-output.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q 不设定追兵人数、距离或装备 fixtures/success-output.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q 不补充追兵后续位置或主路环境细节 fixtures/success-output.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q ^补充模板：$ fixtures/failure-output.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"python3 -","flag":"","children":[],"hot":false}],"hot":false}],"truncated":0}},{"phase":"scripts","target":"scripts/self-test.sh","label":"guided:BASH_SOURCE","status":"ok","duration":0.513,"new_signatures":[],"findings":0,"note":"","commands":[],"agent_reply":"","graph":{"roots":[{"kind":"proc","label":"bash <skill>/scripts/self-test.sh","flag":"","children":[{"kind":"proc","label":"dirname true","flag":"","children":[],"hot":false}],"hot":false}],"truncated":0}},{"phase":"scripts","target":"scripts/self-test.sh","label":"ci-github","status":"ok","duration":2.02,"new_signatures":[],"findings":0,"note":"","commands":[],"agent_reply":"","graph":{"roots":[{"kind":"proc","label":"bash <skill>/scripts/self-test.sh","flag":"","children":[{"kind":"proc","label":"dirname <skill>/scripts/self-test.sh","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q ^name: video-overloaded-shot-split-cn$ SKILL.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q ^name: video-overloaded-shot-split-cn$ manifest.yaml","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q ^slug: video-overloaded-shot-split-cn$ manifest.yaml","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q ^icon: icon-512.png$ manifest.yaml","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q allow_implicit_invocation: true agents/openai.yaml","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q 成功样例 README.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q npx skills add xxjrq/video-overloaded-shot-split-cn README.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q 不补充存储卡的藏放位置、状态或持拿方式 fixtures/success-output.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q 不设定追兵人数、距离或装备 fixtures/success-output.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q 不补充追兵后续位置或主路环境细节 fixtures/success-output.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q ^补充模板：$ fixtures/failure-output.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"python3 -","flag":"","children":[],"hot":false}],"hot":false}],"truncated":0}},{"phase":"llm","target":"SKILL.md","label":"baseline","status":"ok","duration":11.738,"new_signatures":[],"findings":0,"note":"5 model steps, 4 commands","commands":["ls -la; ls -R ./skill | head -50","cd skill; cat fixtures/success-input.md; echo ----; cat fixtures/success-output.md; echo ----; cat fixtures/failure-input.md; echo ----; cat fixtures/failure-output.md; echo ----; cat README.md; ls ..","cd skill; cat scripts/self-test.sh; cat manifest.yaml; cat _meta.json; cat agents/openai.yaml; git -C .. log --oneline | head","cd skill; bash scripts/self-test.sh"],"agent_reply":"我按 `video-overloaded-shot-split-cn` 的规则检查了当前项目，但**没有找到可以拆分的镜头材料**，因此没有生成镜头表，也没有改动任何文件。\n\n## 缺少资料\n\n这个技能需要三项必需输入，目前三项都缺：\n\n| 必需项 | 状态 |\n|---|---|\n| 已有镜头描述 | 未提供 |\n| 情节必留点 | 未提供 |\n| 总时长预算（秒） | 未提供 |\n\n可选补充项：画幅、镜头风格、已有素材限制（例如不能实拍、只能用生成画面）。\n\n另外，当前目录是一个 `payments-api` 服务项目，其中没有剧本、分镜或镜头描述文件，因此无法从项目里自行提取材料。\n\n## 补充模板（可直接复制填写）\n\n```text\n已有镜头描述：\n（原文照抄，一次只提交一个章节、一个场景或一篇短文）\n\n情节必留点：\n1.\n2.\n3.\n\n总时长预算：__ 秒\n\n可选：\n画幅：__\n镜头风格：__\n已有素材限制：__\n```\n\n## 收到材料后的交付内容\n\n1. **拆分判断**：标出原镜头中同时发生的动作、视点变化、信息揭示和空间跳转，只拆负载过高的部分；负载适中的镜头保持原状","graph":{"roots":[{"kind":"proc","label":"bash -c ls -la; ls -R ./skill | head -50","flag":"","children":[{"kind":"proc","label":"ls -la","flag":"","children":[],"hot":false},{"kind":"proc","label":"ls -R ./skill","flag":"","children":[],"hot":false},{"kind":"proc","label":"head -50","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd skill; cat fixtures/success-input.md; echo ----; cat f...","flag":"","children":[{"kind":"proc","label":"cat fixtures/success-input.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat fixtures/success-output.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat fixtures/failure-input.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat fixtures/failure-output.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat README.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"ls ../src","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat ../README.md","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd skill; cat scripts/self-test.sh; cat manifest.yaml; ca...","flag":"","children":[{"kind":"proc","label":"cat scripts/self-test.sh","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat manifest.yaml","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat _meta.json","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat agents/openai.yaml","flag":"","children":[],"hot":false},{"kind":"proc","label":"git -C .. log --oneline","flag":"","children":[],"hot":false},{"kind":"proc","label":"head","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd skill; bash scripts/self-test.sh","flag":"","children":[{"kind":"proc","label":"bash scripts/self-test.sh","flag":"","children":[{"kind":"proc","label":"dirname scripts/self-test.sh","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q ^name: video-overloaded-shot-split-cn$ SKILL.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q ^name: video-overloaded-shot-split-cn$ manifest.yaml","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q ^slug: video-overloaded-shot-split-cn$ manifest.yaml","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q ^icon: icon-512.png$ manifest.yaml","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q allow_implicit_invocation: true agents/openai.yaml","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q 成功样例 README.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q npx skills add xxjrq/video-overloaded-shot-split-cn README.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q 不补充存储卡的藏放位置、状态或持拿方式 fixtures/success-output.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q 不设定追兵人数、距离或装备 fixtures/success-output.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q 不补充追兵后续位置或主路环境细节 fixtures/success-output.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q ^补充模板：$ fixtures/failure-output.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"python3 -","flag":"","children":[],"hot":false}],"hot":false}],"hot":false}],"truncated":0}}],"stopped":"scripts/scripts/self-test.sh: coverage plateau (2 runs with no new behavior); llm: variants exhausted","model_usage":{"prompt_tokens":11911,"completion_tokens":752,"llm_runs":1}},"surface":{},"startup":{},"partial_scan":"","note":"Observed behavior only. A clean result does not prove a package is safe.","summary":"We ran it 4 times, with a normal setup, BASH_SOURCE set and a GitHub Actions environment. It made no network connections. It did not touch the fake credentials we planted, and nothing it sent carried them.","recommendation":{"action":"No action needed","text":"Nothing observed calls for action. This is evidence, not a guarantee."},"iocs":{"hosts":[],"ips":[],"sha256":"0b63c305ef06b3a4b79f69e43af38b640c50cc213510e2da6dbad58543e65c0d","benign_hosts":[]},"coverage":{"runs":4,"phases":["llm","scripts"],"environments":["baseline","guided:BASH_SOURCE","ci-github"],"tool_calls":0,"model_runs":1,"stopped":"scripts/scripts/self-test.sh: coverage plateau (2 runs with no new behavior); llm: variants exhausted"},"tree":{"run":"llm:baseline","roots":[{"kind":"proc","label":"bash -c ls -la; ls -R ./skill | head -50","flag":"","children":[{"kind":"proc","label":"ls -la","flag":"","children":[],"hot":false},{"kind":"proc","label":"ls -R ./skill","flag":"","children":[],"hot":false},{"kind":"proc","label":"head -50","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd skill; cat fixtures/success-input.md; echo ----; cat f...","flag":"","children":[{"kind":"proc","label":"cat fixtures/success-input.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat fixtures/success-output.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat fixtures/failure-input.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat fixtures/failure-output.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat README.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"ls ../src","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat ../README.md","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd skill; cat scripts/self-test.sh; cat manifest.yaml; ca...","flag":"","children":[{"kind":"proc","label":"cat scripts/self-test.sh","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat manifest.yaml","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat _meta.json","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat agents/openai.yaml","flag":"","children":[],"hot":false},{"kind":"proc","label":"git -C .. log --oneline","flag":"","children":[],"hot":false},{"kind":"proc","label":"head","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd skill; bash scripts/self-test.sh","flag":"","children":[{"kind":"proc","label":"bash scripts/self-test.sh","flag":"","children":[{"kind":"proc","label":"dirname scripts/self-test.sh","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q ^name: video-overloaded-shot-split-cn$ SKILL.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q ^name: video-overloaded-shot-split-cn$ manifest.yaml","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q ^slug: video-overloaded-shot-split-cn$ manifest.yaml","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q ^icon: icon-512.png$ manifest.yaml","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q allow_implicit_invocation: true agents/openai.yaml","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q 成功样例 README.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q npx skills add xxjrq/video-overloaded-shot-split-cn README.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q 不补充存储卡的藏放位置、状态或持拿方式 fixtures/success-output.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q 不设定追兵人数、距离或装备 fixtures/success-output.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q 不补充追兵后续位置或主路环境细节 fixtures/success-output.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -q ^补充模板：$ fixtures/failure-output.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"python3 -","flag":"","children":[],"hot":false}],"hot":false}],"hot":false}],"preview":[],"truncated":0},"flow":{"package":{"name":"video-overloaded-shot-split-cn","version":"","files":17,"kind":"skill"},"install":[],"has_install":false,"run":["bash <skill>/scripts/self-test.sh","dirname <skill>/scripts/self-test.sh","grep -q ^name: video-overloaded-shot-split-cn$ SKILL.md","grep -q ^name: video-overloaded-shot-split-cn$ manifest.yaml","grep -q ^slug: video-overloaded-shot-split-cn$ manifest.yaml","grep -q ^icon: icon-512.png$ manifest.yaml"],"tools":[],"startup":"","partial":"","tool_calls":0,"agent_runs":1,"network":[],"secrets":[],"files":[],"has_graph":true},"confidence":""}}