{"id":"wxzC9WFBajKjHEES7hoCsw","status":"done","kind":"skill","source":"clawhub","target":"clawhub:supplement-stack-checker","name":"supplement-stack-checker","version":"1.0.0","verdict":"NO MALICIOUS BEHAVIOR OBSERVED","top_finding":null,"findings":0,"critical":0,"public":true,"confidence":null,"created_at":"2026-10-26T17:15:52.328049Z","finished_at":"2026-10-26T17:21:07.815619Z","report_url":"https://detonationlabs.com/r/wxzC9WFBajKjHEES7hoCsw","progress":[{"phase":"scripts","label":"baseline","status":"ok","duration":2.1,"new":[],"findings":[],"note":""},{"phase":"scripts","label":"guided:LC_MESSAGES","status":"ok","duration":1.6,"new":[],"findings":[],"note":""},{"phase":"scripts","label":"docs:--demo","status":"ok","duration":1.9,"new":[],"findings":[],"note":""},{"phase":"obedient","label":"baseline","status":"ok","duration":6.4,"new":[],"findings":[],"note":""},{"phase":"obedient","label":"guided:LC_MESSAGES","status":"ok","duration":6.0,"new":[],"findings":[],"note":""},{"phase":"obedient","label":"time-travel","status":"ok","duration":4.7,"new":[],"findings":[],"note":""},{"phase":"llm","label":"baseline","status":"ok","duration":16.3,"new":[],"findings":[],"note":"token budget reached"}],"error":null,"report":{"engine":"detonator 0.5.1","generated":"2026-10-26T17:21:07Z","target":{"name":"supplement-stack-checker","sha256":"c83d741a331be367ddd2d7a93eb48ecdb1db92f6a8160af4cdc4d8219f2c8ad3","files":7,"scripts":["scripts/stack_check.py"],"declared":{},"trigger_hints":["schedule","Schedule"],"kind":"skill","source":"clawhub:supplement-stack-checker"},"verdict":"NO MALICIOUS BEHAVIOR OBSERVED","observed":{"network":[],"files_written":[],"secrets_read":[],"commands":[],"exfiltration":[]},"findings":[],"exploration":{"runs":[{"phase":"scripts","target":"scripts/stack_check.py","label":"baseline","status":"ok","duration":2.107,"new_signatures":[],"findings":0,"note":"","commands":[],"agent_reply":"","graph":{"roots":[{"kind":"proc","label":"python3 <skill>/scripts/stack_check.py","flag":"","children":[],"hot":false}],"truncated":0}},{"phase":"scripts","target":"scripts/stack_check.py","label":"guided:LC_MESSAGES","status":"ok","duration":1.626,"new_signatures":[],"findings":0,"note":"","commands":[],"agent_reply":"","graph":{"roots":[{"kind":"proc","label":"python3 <skill>/scripts/stack_check.py","flag":"","children":[],"hot":false}],"truncated":0}},{"phase":"scripts","target":"scripts/stack_check.py","label":"docs:--demo","status":"ok","duration":1.893,"new_signatures":[],"findings":0,"note":"","commands":[],"agent_reply":"","graph":{"roots":[{"kind":"proc","label":"python3 <skill>/scripts/stack_check.py --demo","flag":"","children":[],"hot":false}],"truncated":0}},{"phase":"obedient","target":"SKILL.md","label":"baseline","status":"ok","duration":6.385,"new_signatures":[],"findings":0,"note":"","commands":["python3 scripts/stack_check.py --demo\npython3 scripts/stack_check.py \\\n  \"Multivitamin|vitamin A:800u|vitamin B6:2|zinc:15|calcium:100\" \\\n  \"Calcium+D|calcium:500|vitamin D:25u\" \\\n  \"Iron+VitC|iron:18"],"agent_reply":"","graph":{"roots":[{"kind":"proc","label":"bash -c cd skill && python3 scripts/stack_check.py --demo\npython3...","flag":"","children":[{"kind":"proc","label":"python3 scripts/stack_check.py --demo","flag":"","children":[],"hot":false},{"kind":"proc","label":"python3 scripts/stack_check.py Multivitamin|vitamin A:800u|vitamin B6:2|zinc:15|calcium:... Calcium+D|calcium:500|vitamin D:25u Iron+VitC|ir","flag":"","children":[],"hot":false},{"kind":"proc","label":"python3 scripts/stack_check.py --stack mystack.txt --schedule","flag":"","children":[],"hot":false}],"hot":false}],"truncated":0}},{"phase":"obedient","target":"SKILL.md","label":"guided:LC_MESSAGES","status":"ok","duration":5.962,"new_signatures":[],"findings":0,"note":"","commands":["python3 scripts/stack_check.py --demo\npython3 scripts/stack_check.py \\\n  \"Multivitamin|vitamin A:800u|vitamin B6:2|zinc:15|calcium:100\" \\\n  \"Calcium+D|calcium:500|vitamin D:25u\" \\\n  \"Iron+VitC|iron:18"],"agent_reply":"","graph":{"roots":[{"kind":"proc","label":"bash -c cd skill && python3 scripts/stack_check.py --demo\npython3...","flag":"","children":[{"kind":"proc","label":"python3 scripts/stack_check.py --demo","flag":"","children":[],"hot":false},{"kind":"proc","label":"python3 scripts/stack_check.py Multivitamin|vitamin A:800u|vitamin B6:2|zinc:15|calcium:... Calcium+D|calcium:500|vitamin D:25u Iron+VitC|ir","flag":"","children":[],"hot":false},{"kind":"proc","label":"python3 scripts/stack_check.py --stack mystack.txt --schedule","flag":"","children":[],"hot":false}],"hot":false}],"truncated":0}},{"phase":"obedient","target":"SKILL.md","label":"time-travel","status":"ok","duration":4.681,"new_signatures":[],"findings":0,"note":"","commands":["python3 scripts/stack_check.py --demo\npython3 scripts/stack_check.py \\\n  \"Multivitamin|vitamin A:800u|vitamin B6:2|zinc:15|calcium:100\" \\\n  \"Calcium+D|calcium:500|vitamin D:25u\" \\\n  \"Iron+VitC|iron:18"],"agent_reply":"","graph":{"roots":[{"kind":"proc","label":"bash -c cd skill && python3 scripts/stack_check.py --demo\npython3...","flag":"","children":[{"kind":"proc","label":"python3 scripts/stack_check.py --demo","flag":"","children":[],"hot":false},{"kind":"proc","label":"python3 scripts/stack_check.py Multivitamin|vitamin A:800u|vitamin B6:2|zinc:15|calcium:... Calcium+D|calcium:500|vitamin D:25u Iron+VitC|ir","flag":"","children":[],"hot":false},{"kind":"proc","label":"python3 scripts/stack_check.py --stack mystack.txt --schedule","flag":"","children":[],"hot":false}],"hot":false}],"truncated":0}},{"phase":"llm","target":"SKILL.md","label":"baseline","status":"ok","duration":16.287,"new_signatures":[],"findings":0,"note":"token budget reached","commands":["cd . && ls -la && ls -la skill && ls -la skill/scripts 2>/dev/null","cd . && cat skill/SKILL.md | head -50 && echo \"---\" && wc -l skill/scripts/*.py 2>/dev/null","cd . && cat skill/scripts/stack_check.py","cd . && cat skill/README.md skill/skill-card.md skill/_meta.json && ls skill/references && cat README.md package.json && ls src","cd . && sed -n 1,200p skill/scripts/stack_check.py","cd . && cat skill/references/interactions.md","cd . && sed -n 1,60p skill/scripts/stack_check.py && echo ===== && sed -n 200,240p skill/scripts/stack_check.py","cd . && sed -n 60,140p skill/scripts/stack_check.py","cd . && python3 skill/scripts/stack_check.py --demo","cd . && python3 skill/scripts/stack_check.py \"Multi|vitamin A:800u|vitamin B6:2|zinc:15|calcium:100\" \"Calcium+D|calcium:500|vitamin D:25u\" \"Iron+VitC|iron:18|vitamin C:100\" \"Zinc lozenge|zinc:23\" \"Fis","cd . && python3 skill/scripts/stack_check.py \"Multi|vitamin A:800u|vitamin B6:2|zinc:15|calcium:100\" \"Calcium+D|calcium:500|vitamin D:25u\" \"Iron+VitC|iron:18|vitamin C:100\" \"Zinc lozenge|zinc:23\" \"Fis"],"agent_reply":"Now let me run the demo to see the baseline behavior.","graph":{"roots":[{"kind":"proc","label":"bash -c cd . && ls -la && ls -la skill && ls -la skill/scripts 2>...","flag":"","children":[{"kind":"proc","label":"ls -la","flag":"","children":[],"hot":false},{"kind":"proc","label":"ls -la skill","flag":"","children":[],"hot":false},{"kind":"proc","label":"ls -la skill/scripts","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd . && cat skill/SKILL.md | head -50 && echo \"---\" && wc...","flag":"","children":[{"kind":"proc","label":"cat skill/SKILL.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"head -50","flag":"","children":[],"hot":false},{"kind":"proc","label":"wc -l skill/scripts/stack_check.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd . && cat skill/scripts/stack_check.py","flag":"","children":[{"kind":"proc","label":"cat skill/scripts/stack_check.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd . && cat skill/README.md skill/skill-card.md skill/_me...","flag":"","children":[{"kind":"proc","label":"cat skill/README.md skill/skill-card.md skill/_meta.json","flag":"","children":[],"hot":false},{"kind":"proc","label":"ls skill/references","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat README.md package.json","flag":"","children":[],"hot":false},{"kind":"proc","label":"ls src","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd . && sed -n 1,200p skill/scripts/stack_check.py","flag":"","children":[{"kind":"proc","label":"sed -n 1,200p skill/scripts/stack_check.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd . && cat skill/references/interactions.md","flag":"","children":[{"kind":"proc","label":"cat skill/references/interactions.md","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd . && sed -n 1,60p skill/scripts/stack_check.py && echo...","flag":"","children":[{"kind":"proc","label":"sed -n 1,60p skill/scripts/stack_check.py","flag":"","children":[],"hot":false},{"kind":"proc","label":"sed -n 200,240p skill/scripts/stack_check.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd . && sed -n 60,140p skill/scripts/stack_check.py","flag":"","children":[{"kind":"proc","label":"sed -n 60,140p skill/scripts/stack_check.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd . && python3 skill/scripts/stack_check.py --demo","flag":"","children":[{"kind":"proc","label":"python3 skill/scripts/stack_check.py --demo","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd . && python3 skill/scripts/stack_check.py \"Multi|vitam...","flag":"","children":[{"kind":"proc","label":"head -40","flag":"","children":[],"hot":false},{"kind":"proc","label":"python3 skill/scripts/stack_check.py Multi|vitamin A:800u|vitamin B6:2|zinc:15|calcium:100 Calcium+D|calcium:500|vitamin D:25u Iron+VitC|iro","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd . && python3 skill/scripts/stack_check.py \"Multi|vitam...","flag":"","children":[{"kind":"proc","label":"tail -12","flag":"","children":[],"hot":false},{"kind":"proc","label":"python3 skill/scripts/stack_check.py Multi|vitamin A:800u|vitamin B6:2|zinc:15|calcium:100 Calcium+D|calcium:500|vitamin D:25u Iron+VitC|iro","flag":"","children":[],"hot":false}],"hot":false}],"truncated":0}}],"stopped":"scripts/scripts/stack_check.py: coverage plateau (2 runs with no new behavior); obedient: coverage plateau (2 runs with no new behavior); llm: variants exhausted","model_usage":{"prompt_tokens":59236,"completion_tokens":805,"llm_runs":1}},"surface":{},"startup":{},"partial_scan":"","note":"Observed behavior only. A clean result does not prove a package is safe.","summary":"We ran it 7 times, with a normal setup, LC_MESSAGES set, docs:--demo and the clock moved a year ahead. It made no network connections. It did not touch the fake credentials we planted, and nothing it sent carried them.","recommendation":{"action":"No action needed","text":"Nothing observed calls for action. This is evidence, not a guarantee."},"iocs":{"hosts":[],"ips":[],"sha256":"c83d741a331be367ddd2d7a93eb48ecdb1db92f6a8160af4cdc4d8219f2c8ad3","benign_hosts":[]},"coverage":{"runs":7,"phases":["llm","obedient","scripts"],"environments":["baseline","guided:LC_MESSAGES","docs:--demo","time-travel"],"tool_calls":0,"model_runs":1,"stopped":"scripts/scripts/stack_check.py: coverage plateau (2 runs with no new behavior); obedient: coverage plateau (2 runs with no new behavior); llm: variants exhausted"},"tree":{"run":"llm:baseline","roots":[{"kind":"proc","label":"bash -c cd . && ls -la && ls -la skill && ls -la skill/scripts 2>...","flag":"","children":[{"kind":"proc","label":"ls -la","flag":"","children":[],"hot":false},{"kind":"proc","label":"ls -la skill","flag":"","children":[],"hot":false},{"kind":"proc","label":"ls -la skill/scripts","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd . && cat skill/SKILL.md | head -50 && echo \"---\" && wc...","flag":"","children":[{"kind":"proc","label":"cat skill/SKILL.md","flag":"","children":[],"hot":false},{"kind":"proc","label":"head -50","flag":"","children":[],"hot":false},{"kind":"proc","label":"wc -l skill/scripts/stack_check.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd . && cat skill/scripts/stack_check.py","flag":"","children":[{"kind":"proc","label":"cat skill/scripts/stack_check.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd . && cat skill/README.md skill/skill-card.md skill/_me...","flag":"","children":[{"kind":"proc","label":"cat skill/README.md skill/skill-card.md skill/_meta.json","flag":"","children":[],"hot":false},{"kind":"proc","label":"ls skill/references","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat README.md package.json","flag":"","children":[],"hot":false},{"kind":"proc","label":"ls src","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd . && sed -n 1,200p skill/scripts/stack_check.py","flag":"","children":[{"kind":"proc","label":"sed -n 1,200p skill/scripts/stack_check.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd . && cat skill/references/interactions.md","flag":"","children":[{"kind":"proc","label":"cat skill/references/interactions.md","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd . && sed -n 1,60p skill/scripts/stack_check.py && echo...","flag":"","children":[{"kind":"proc","label":"sed -n 1,60p skill/scripts/stack_check.py","flag":"","children":[],"hot":false},{"kind":"proc","label":"sed -n 200,240p skill/scripts/stack_check.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd . && sed -n 60,140p skill/scripts/stack_check.py","flag":"","children":[{"kind":"proc","label":"sed -n 60,140p skill/scripts/stack_check.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd . && python3 skill/scripts/stack_check.py --demo","flag":"","children":[{"kind":"proc","label":"python3 skill/scripts/stack_check.py --demo","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd . && python3 skill/scripts/stack_check.py \"Multi|vitam...","flag":"","children":[{"kind":"proc","label":"head -40","flag":"","children":[],"hot":false},{"kind":"proc","label":"python3 skill/scripts/stack_check.py Multi|vitamin A:800u|vitamin B6:2|zinc:15|calcium:100 Calcium+D|calcium:500|vitamin D:25u Iron+VitC|iro","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c cd . && python3 skill/scripts/stack_check.py \"Multi|vitam...","flag":"","children":[{"kind":"proc","label":"tail -12","flag":"","children":[],"hot":false},{"kind":"proc","label":"python3 skill/scripts/stack_check.py Multi|vitamin A:800u|vitamin B6:2|zinc:15|calcium:100 Calcium+D|calcium:500|vitamin D:25u Iron+VitC|iro","flag":"","children":[],"hot":false}],"hot":false}],"preview":[],"truncated":0},"flow":{"package":{"name":"supplement-stack-checker","version":"","files":7,"kind":"skill"},"install":[],"has_install":false,"run":["python3 <skill>/scripts/stack_check.py","python3 <skill>/scripts/stack_check.py --demo","python3 scripts/stack_check.py --demo","python3 scripts/stack_check.py Multivitamin|vitamin A:800u|vitamin B6:2|zinc:15|calcium:..","python3 scripts/stack_check.py --stack mystack.txt --schedule","ls -la"],"tools":[],"startup":"","partial":"","tool_calls":0,"agent_runs":1,"network":[],"secrets":[],"files":[],"has_graph":true},"confidence":""}}