Verdict
No malicious behavior observed
We ran it 1 time, with a normal setup. It made no network connections. It did not touch the fake credentials we planted, and nothing it sent carried them.
0 findings. Scanned 26 Oct 2026 by detonator 0.5.1.
- Target
- shicai-xuancai-bikeng
- Source
- clawhub 1.0.0
- SHA-256
- beca393d2247be38
- Files
- 30
Nothing observed calls for action. This is evidence, not a guarantee.
batch:clawhub:2026-10-26
What this package does
observed across 1 run- Package shicai-xuancai-bikeng 30 files · agent skill
- Install No install stepFiles were copied in as they are.
- Runs as ls -lals -la references/head -40cat ref-001.md ref-003.md ref-004.md ref-007.md An AI agent also used it 1 time.
-
What it reached
Network
No connections.
CredentialsNone of the planted fake keys were touched.
Files writtenNothing outside its own folder.
We planted fake AWS, SSH, npm and GitHub keys and a .env file before every run. Red means something left or was planted to run later.
Findings
No findings. Detonator observed no malicious or suspicious behavior in the runs below.
Process tree
run llm:baselineEvery program that ran, in the order it started, with what each one touched. Red marks the path to a leak or a planted file.
Show process tree
- runbash -c cd ./skill && ls -la && ls -la references/ 2>/dev/null | ...
- runls -la
- runls -la references/
- runhead -40
- runbash -c cd ./skill/references && cat ref-001.md ref-003.md ref-00...
- runcat ref-001.md ref-003.md ref-004.md ref-007.md
- runbash -c cd ./skill/references && cat ref-016.md ref-018.md ref-01...
- runcat ref-016.md ref-018.md ref-019.md ref-020.md ref-022.md
- runbash -c cd ./skill/references && cat ref-024.md ref-025.md ref-02...
- runcat ref-024.md ref-025.md ref-026.md ref-015.md
- runbash -c cd ./skill/references && cat ref-002.md ref-005.md ref-00...
- runcat ref-002.md ref-005.md ref-006.md ref-008.md ref-009.md
- runbash -c cd ./skill/references && cat ref-011.md ref-012.md ref-01...
- runcat ref-011.md ref-012.md ref-013.md ref-014.md
- runbash -c cd ./skill/references && cat ref-017.md ref-021.md ref-02...
- runcat ref-017.md ref-021.md ref-023.md ref-027.md
- runbash -c cd ./skill/references && head -30 ref-011.md && echo ----...
- runhead -30 ref-011.md
- runhead -20 ref-017.md
- runhead -20 ref-001.md
- runhead -20 ref-002.md
- runbash -c cd ./skill/references && sed -n 20,80p ref-001.md
- runsed -n 20,80p ref-001.md
Exploration log
1 run-
llm:baseline ok · 23.6s
no new behavior · 6 model steps, 9 commands
$ cd ./skill && ls -la && ls -la references/ 2>/dev/null | head -40 $ cd ./skill/references && cat ref-001.md ref-003.md ref-004.md ref-007.md $ cd ./skill/references && cat ref-016.md ref-018.md ref-019.md ref-020.md ref-022.md $ cd ./skill/references && cat ref-024.md ref-025.md ref-026.md ref-015.md $ cd ./skill/references && cat ref-002.md ref-005.md ref-006.md ref-008.md ref-009.md ref-010.md $ cd ./skill/references && cat ref-011.md ref-012.md ref-013.md ref-014.md $ cd ./skill/references && cat ref-017.md ref-021.md ref-023.md ref-027.md $ cd ./skill/references && head -30 ref-011.md && echo ---- && head -20 ref-017.md && echo ---- && head -20 ref-001.md && echo ---- && head -20 ref-002.md $ cd ./skill/references && sed -n 20,80p ref-001.md model said: 我把知识库里的 27 篇内容都读完了。你问的这三个问题,正好是业主最纠结、也最容易出问题的三处。下面我按场景逐个说清楚。 --- ## 一、橱柜台面:石英石还是岩板? **【直接回答】** 先看预算,再谈喜好。预算够,就选岩板;预算紧,就选石英石,但一定要在台面下加垫板。这两种材料各有明显短板:石英石会渗色、接缝明显;岩板怕磕碰、价格高。真正决定台面会不会出问题的,是台面下方有没有垫板,而不是材料本身。 **【详细分析】** - **石英石**:硬度高、耐高温、阻燃、无毒,可以直接接触食物,是大多数家庭的首选。缺点是内部有树脂,再好的石英石,酱油倒上去 24 小时也会渗色;接缝必然存在,因为石材规格固定,尺寸超了或者电梯进不去就得拼;带纹路的石英石纹路是随机的,加工完到你家纹路落在哪全看运气。 - **岩板**:高温压制,内部几乎无空隙,基本不渗色,耐高温远胜石英石,线条感强、更极
llm: variants exhausted
Observed behavior only. A clean result does not prove a package is safe. Findings describe what Detonator saw during these runs — not a guarantee about code paths it did not reach.