Detonation LabsBehavioral security for the AI agent supply chain

Verdict

No malicious behavior observed

We ran it 1 time, with a normal setup. It made no network connections. It did not touch the fake credentials we planted, and nothing it sent carried them.

0 findings. Scanned 26 Oct 2026 by detonator 0.5.1.

Target
islamic-inheritance-calculator
Source
clawhub 0.1.0
SHA-256
3dc6ffcb2af6b94a
Files
4
RecommendationNo action needed

Nothing observed calls for action. This is evidence, not a guarantee.

batch:clawhub:2026-10-26

Findings

No findings. Detonator observed no malicious or suspicious behavior in the runs below.

Exploration log

1 run
  1. llm:baseline ok · 4.1s

    no new behavior · 1 model steps, 0 commands

llm: variants exhausted

Note

Observed behavior only. A clean result does not prove a package is safe. Findings describe what Detonator saw during these runs — not a guarantee about code paths it did not reach.