Verdict

No malicious behavior observed

We ran it 7 times, with a normal setup, LC_MESSAGES and LINKDIGEST_API_KEY set and the environment variables it says it needs. It made no network connections. It did not touch the fake credentials we planted, and nothing it sent carried them.

1 finding. Scanned 27 Oct 2026 by detonator 0.5.1.

Target: bilibili-video-to-text
Source: clawhub 1.0.0
SHA-256: f6806b5cc8549231
Files: 4

RecommendationNo action needed

Nothing observed calls for action. This is evidence, not a guarantee.

batch:clawhub:2026-10-27

What this package does

observed across 7 runs

Package bilibili-video-to-text 4 files · agent skill
Install No install stepFiles were copied in as they are.
Runs as python3 <skill>/scripts/linkdigest.pypython3 {baseDir}/scripts/linkdigest.py https://www.bilibili.com/video/BV1FtHg6nEE2/ls -la ./skillls -la ./skill/scripts An AI agent also used it 1 time.
What it reached
Network
No connections.
Credentials
- ./.envread
Files written
Nothing outside its own folder.

We planted fake AWS, SSH, npm and GitHub keys and a .env file before every run. Red means something left or was planted to run later.

Findings

F01 Low

Loaded the project's .env file

Confidence: Info The package loaded the project's .env file.
Observed in: llm:baseline

Description

The process loaded the project's .env file. Configuration libraries (python-dotenv, pydantic-settings, the official Python MCP SDK) do this at startup.

Impact

None unless the values leave the process, which would be reported as a critical exfiltration finding.

Evidence

./.env (by grep, sed)

Remediation

No action needed. Keep long-lived secrets out of project .env files where possible.

Process tree

run llm:baseline

Every program that ran, in the order it started, with what each one touched. Red marks the path to a leak or a planted file.

runbash -c cd ./skill && cat _meta.json; echo "---"; python3 scripts...
- rungrep -rl ld_live_ ..
  - secretread ./.env
runbash -c pwd; ls -la; echo "---ENV---"; sed -E 's/(=.{0,6}).*/\1â...
- runsed -E s/(=.{0,6}).*/\1â¦/ .env
  - secretread ./.env

View full process tree

runbash -c ls -la ./skill && ls -la ./skill/scripts 2>/dev/null; ech...
- runls -la ./skill
- runls -la ./skill/scripts
runbash -c cd ./skill && cat _meta.json; echo "---"; python3 scripts...
- rungrep -rl ld_live_ ..
  - secretread ./.env
- runcat _meta.json
- runhead -40
- runpython3 scripts/linkdigest.py --help
- runls -la ..
- runhead
runbash -c cd .. && sed -E 's/(=.{0,6}).*/\1â¦/' .env; echo "---REA...
- runsed -E s/(=.{0,6}).*/\1â¦/ .env
- runcat README.md
- runls -la src
runbash -c pwd; ls -la; echo "---ENV---"; sed -E 's/(=.{0,6}).*/\1â...
- runsed -E s/(=.{0,6}).*/\1â¦/ .env
  - secretread ./.env
- runls -la
- runcat README.md
- runls -la src
runbash -c grep -n -i "api_key\|ld_live\|environ\|getenv\|exit(" ski...
- runhead -30
- rungrep -n -i api_key\|ld_live\|environ\|getenv\|exit( skill/scripts/linkdigest.py
runbash -c sed -n 125,200p skill/scripts/linkdigest.py
- runsed -n 125,200p skill/scripts/linkdigest.py
runbash -c cd skill && timeout 60 python3 scripts/linkdigest.py 2>&1...
- runhead -20
- runtimeout 60 python3 scripts/linkdigest.py
  - runpython3 scripts/linkdigest.py

Exploration log

7 runs

scripts:baseline ok · 1.6s

no new behavior
scripts:guided:LC_MESSAGES,LINKDIGEST_API_KEY ok · 1.7s

no new behavior
scripts:declared-env ok · 1.4s

no new behavior
obedient:baseline ok · 0.7s

no new behavior

$ export LINKDIGEST_API_KEY=ld_live_... # https://linkdigest.dev/signin?ref=skill-bilibili-video-to-text&next=/app/keys python3 {baseDir}/scripts/linkdigest.py "https://www.bilibili.com/video/BV1FtHg6
obedient:declared-env ok · 1.0s

no new behavior

$ export LINKDIGEST_API_KEY=ld_live_... # https://linkdigest.dev/signin?ref=skill-bilibili-video-to-text&next=/app/keys python3 {baseDir}/scripts/linkdigest.py "https://www.bilibili.com/video/BV1FtHg6
obedient:guided:LC_MESSAGES,LINKDIGEST_API_KEY ok · 0.6s

no new behavior

$ export LINKDIGEST_API_KEY=ld_live_... # https://linkdigest.dev/signin?ref=skill-bilibili-video-to-text&next=/app/keys python3 {baseDir}/scripts/linkdigest.py "https://www.bilibili.com/video/BV1FtHg6
llm:baseline ok · 17.9s

new behavior: ownread:./.env · 8 model steps, 7 commands

$ ls -la ./skill && ls -la ./skill/scripts 2>/dev/null; echo "---KEY---"; if [ -n "$LINKDIGEST_API_KEY" ]; then echo "key set: ${LINKDIGEST_API_KEY:0:8}..."; else echo "LINKDIGEST_API_KEY not set"; fi $ cd ./skill && cat _meta.json; echo "---"; python3 scripts/linkdigest.py --help 2>&1 | head -40; echo "---ENV FILES---"; ls -la .. ; grep -rl "ld_live_" .. 2>/dev/null | head $ cd .. && sed -E 's/(=.{0,6}).*/\1…/' .env; echo "---README---"; cat README.md; echo "---SRC---"; ls -la src $ pwd; ls -la; echo "---ENV---"; sed -E 's/(=.{0,6}).*/\1…/' .env; echo "---README---"; cat README.md; echo "---SRC---"; ls -la src $ grep -n -i "api_key\|ld_live\|environ\|getenv\|exit(" skill/scripts/linkdigest.py | head -30 $ sed -n 125,200p skill/scripts/linkdigest.py $ cd skill && timeout 60 python3 scripts/linkdigest.py 2>&1 | head -20; echo "exit=$?" model said: I checked the skill and the project, and I can't run the task yet — two things are missing. **What I found** - The skill is installed at `./skill` with a working script: `skill/scripts/linkdigest.py` (it runs, and its `--help` and usage checks work). - **No Bilibili link was provided.** Your message describes what the skill does, but doesn't include a `bilibili.com/video/BV…` or `b23.tv` link to

scripts/scripts/linkdigest.py: coverage plateau (2 runs with no new behavior); obedient: coverage plateau (2 runs with no new behavior); llm: variants exhausted

Note

Observed behavior only. A clean result does not prove a package is safe. Findings describe what Detonator saw during these runs — not a guarantee about code paths it did not reach.