Verdict

No malicious behavior observed

We ran it 7 times, with a normal setup, BASH_SOURCE set and a GitHub Actions environment. It made no network connections. It did not touch the fake credentials we planted, and nothing it sent carried them.

0 findings. Scanned 27 Oct 2026 by detonator 0.5.1.

Target: novel-foreshadow-map-cn
Source: clawhub 1.0.0
SHA-256: b82a6a9c837f5b27
Files: 19

RecommendationNo action needed

Nothing observed calls for action. This is evidence, not a guarantee.

batch:clawhub:2026-10-27

What this package does

observed across 7 runs

Package novel-foreshadow-map-cn 19 files · agent skill
Install No install stepFiles were copied in as they are.
Runs as python3 <skill>/scripts/render-promo.pybash <skill>/scripts/self-test.shdirname <skill>/scripts/self-test.shpython3 - An AI agent also used it 1 time.
What it reached
Network
No connections.

Credentials
None of the planted fake keys were touched.

Files written
Nothing outside its own folder.

We planted fake AWS, SSH, npm and GitHub keys and a .env file before every run. Red means something left or was planted to run later.

Findings

No findings. Detonator observed no malicious or suspicious behavior in the runs below.

Process tree

run llm:baseline

Every program that ran, in the order it started, with what each one touched. Red marks the path to a leak or a planted file.

Show process tree

runbash -c ls -la; echo ---; ls -la skill 2>/dev/null; echo ---; fin...
- runls -la
- runls -la skill
- runfind . -maxdepth 3 -type f
- runhead -50
runbash -c cd skill; cat README.md; echo ---; cat manifest.yaml; ech...
- runcat README.md
- runcat manifest.yaml
- runcat agents/openai.yaml
- runcat scripts/self-test.sh
- runcat fixtures/failure.md
- runcat fixtures/forward-additional-input.md
- runcat fixtures/forward-additional.md
- runcat fixtures/forward-failure.md
- runcat fixtures/forward-success.md
- runcat fixtures/success.md
runbash -c cd skill; cat README.md; echo ---; cat manifest.yaml; ech...
- runcat README.md
- runcat manifest.yaml
- runcat agents/openai.yaml
- runcat _meta.json
- runhead -40 scripts/self-test.sh
- runcat ../README.md ../package.json
- runhead -60 ../src/index.js
runbash -c cd skill && bash scripts/self-test.sh
- runbash scripts/self-test.sh
  - rundirname scripts/self-test.sh
  - runpython3 -

Exploration log

7 runs

scripts:baseline ok · 1.1s

no new behavior
scripts:guided:BASH_SOURCE ok · 1.3s

no new behavior
scripts:ci-github ok · 0.9s

no new behavior
scripts:baseline ok · 1.4s

no new behavior
scripts:guided:BASH_SOURCE ok · 0.6s

no new behavior
scripts:ci-github ok · 1.4s

no new behavior
llm:baseline ok · 11.8s

no new behavior · 5 model steps, 4 commands

$ ls -la; echo ---; ls -la skill 2>/dev/null; echo ---; find . -maxdepth 3 -type f | head -50 $ cd skill; cat README.md; echo ---; cat manifest.yaml; echo ---; cat agents/openai.yaml; echo ---; cat scripts/self-test.sh; echo ---; for f in fixtures/*; do echo "=== $f"; cat "$f"; done $ cd skill; cat README.md; echo ---; cat manifest.yaml; echo ---; cat agents/openai.yaml; echo ---; cat _meta.json; echo ---; head -40 scripts/self-test.sh; echo ---; cat ../README.md ../package.json; e $ cd skill && bash scripts/self-test.sh model said: 我按 `novel-foreshadow-map-cn` 的流程检查了技能包，但**这次没有可分析的章节材料**：你的消息里只有技能说明，没有章节摘要、场景梗概或原文段落。当前目录是一个 `payments-api` 支付服务项目，其中也没有小说文本。因此，我不会凭空编造伏笔表。 **材料覆盖范围**：无（0 行可分析文本）。 **缺少资料**： 1. 待分析的章节摘要、场景梗概或短段落（单次不超过 100 行，超过请按章节或场景分批提供）； 2. 章节号或场景定位（没有也可以，但会标为“章号未给”）； 3. 可选：角色名、已知后续节点，用于判断“已兑现”或“待兑现”。 **技能包状态核查**（`./skill`）： - `SKILL.md`、`manifest.yaml`、`agents/openai.yaml`、README、LICENSE、fixtures、图标均齐全； - `b

scripts/scripts/render-promo.py: coverage plateau (2 runs with no new behavior); scripts/scripts/self-test.sh: coverage plateau (2 runs with no new behavior); llm: variants exhausted

Note

Observed behavior only. A clean result does not prove a package is safe. Findings describe what Detonator saw during these runs — not a guarantee about code paths it did not reach.