{"id":"yy2_0wDylvwCtv3xk6n6TA","status":"done","kind":"skill","source":"clawhub","target":"clawhub:securemyagent","name":"securemyagent","version":"1.0.0","verdict":"NO MALICIOUS BEHAVIOR OBSERVED","top_finding":null,"findings":4,"critical":0,"public":true,"confidence":null,"created_at":"2026-10-26T17:15:52.400904Z","finished_at":"2026-10-26T18:11:03.045813Z","report_url":"https://detonationlabs.com/r/yy2_0wDylvwCtv3xk6n6TA","progress":[{"phase":"obedient","label":"baseline","status":"ok","duration":80.6,"new":["dns:registry.npmjs.org","ownread:~/.npmrc","write:~/.npm/_logs/*-debug-0.log"],"findings":[],"note":""},{"phase":"obedient","label":"cloud-creds","status":"ok","duration":80.7,"new":[],"findings":[],"note":""},{"phase":"obedient","label":"ci-github","status":"ok","duration":80.9,"new":[],"findings":[],"note":""},{"phase":"llm","label":"baseline","status":"ok","duration":118.9,"new":["exec:curl","read:~/.npmrc","write:~/.npm/_cacache/index-v5/fd/75/*","write:~/.npm/_cacache/tmp/3a*","write:~/.npm/_cacache/tmp/899e5223"],"findings":[],"note":"8 model steps, 8 commands"}],"error":null,"report":{"engine":"detonator 0.5.1","generated":"2026-10-26T18:11:02Z","target":{"name":"securemyagent","sha256":"93b88fa00b8c1f6a8df0744bbbd8eb6a75f96f46470598ef32895d93183cbdc5","files":3,"scripts":[],"declared":{},"trigger_hints":["secret"],"kind":"skill","source":"clawhub:securemyagent"},"verdict":"NO MALICIOUS BEHAVIOR OBSERVED","observed":{"network":["registry.npmjs.org"],"files_written":["~/.npm/_cacache/index-v5/fd/75/*","~/.npm/_cacache/tmp/3a*","~/.npm/_cacache/tmp/899e5223","~/.npm/_cacache/tmp/a53d501c","~/.npm/_cacache/tmp/b1e9cbd2","~/.npm/_cacache/tmp/b5b21d56","~/.npm/_cacache/tmp/c1a24994","~/.npm/_cacache/tmp/d9fdc811","~/.npm/_cacache/tmp/e25d9aad","~/.npm/_logs/*-debug-0.log"],"secrets_read":["~/.npmrc"],"commands":["curl"],"exfiltration":[]},"findings":[{"rule":"secret-login-use","severity":"low","title":"Used the planted login with its own service (registry.npmjs.org)","evidence":["~/.npmrc (npm) sent only as the login header of ordinary requests (no publish)"],"run_label":"obedient:baseline","confidence":"Info","confidence_reason":"A planted login went to the service it belongs to, as normal authentication (npm sending its token to registry.npmjs.org while installing).","why":"Normal: that is how the package manager logs in. Listed so nothing is hidden.","technique":"","description":"A planted login was sent to the service it belongs to, only as the Authorization header of ordinary requests: for example npm sending the ~/.npmrc token to registry.npmjs.org while installing dependencies.","impact":"None in itself: this is how the package manager authenticates. Publishing, unpublishing or creating tokens with it would be reported as exfiltration.","remediation":"No action needed.","references":[]},{"rule":"network-egress","severity":"low","title":"Network destinations contacted","evidence":["registry.npmjs.org"],"run_label":"obedient:baseline","confidence":"Info","confidence_reason":"The package connected to these hosts.","why":"Common for tools that fetch data. Check that the hosts fit what the package says it does.","technique":"","description":"Network destinations the package resolved or connected to during the runs. All traffic was captured by the sandbox; nothing reached the internet.","impact":"Context only. Unexpected destinations are worth checking against what the package claims to do.","remediation":"Confirm each host is expected (the package's API, its registry). Allowlist expected egress in production.","references":[]},{"rule":"secret-read-by-owner","severity":"low","title":"A tool read its own credentials (e.g. gh, aws, ssh)","evidence":["~/.npmrc (by npx)"],"run_label":"obedient:baseline","confidence":"Info","confidence_reason":"A tool opened its own login or config file, such as npm reading ~/.npmrc.","why":"Normal: that is how the tool works. Listed so nothing is hidden.","technique":"","description":"A tool opened its own configuration or login file, such as npm reading ~/.npmrc or gh reading its hosts file.","impact":"None in itself: this is how those tools work. Listed so the report shows every credential access.","remediation":"No action needed.","references":[]},{"rule":"secret-read","severity":"low","title":"Agent read credential files (may be the agent's own choice)","evidence":["~/.npmrc (by cat, npm, npx)"],"run_label":"llm:baseline","confidence":"Info","confidence_reason":"A credential file was opened by a program that does not own it.","why":"Reading credentials is the first step of stealing them; we did not see them leave in this run.","technique":"T1552.001 Credentials in files","description":"A program opened a credential file that it does not own: for example a package script reading ~/.npmrc, ~/.aws/credentials or ~/.ssh/id_rsa, rather than npm, the AWS CLI or ssh reading their own files. The reading program is named in the evidence. In this run the contents were not seen leaving the sandbox.","impact":"Reading credentials is the collection step that precedes theft. Exfiltration may be gated on conditions this run did not meet (a different date, CI variables, a reachable network), or the data may be staged for a later step.","remediation":"Review why this package needs the file. Legitimate tools read only their own configuration; anything else should be treated as hostile until explained. Prefer running it with credentials unavailable (separate user, container, or scoped environment).","references":["ATT&CK T1552.001 Credentials in Files","CWE-200 Exposure of Sensitive Information","OWASP MCP01:2025 Token Mismanagement & Secret Exposure"]}],"exploration":{"runs":[{"phase":"obedient","target":"SKILL.md","label":"baseline","status":"ok","duration":80.598,"new_signatures":["dns:registry.npmjs.org","ownread:~/.npmrc","write:~/.npm/_logs/*-debug-0.log"],"findings":3,"note":"","commands":["npx -y securemyagent@0.2.1 checkup","npx -y securemyagent@0.2.1 register --name <your-name> --runtime openclaw\nnpx -y securemyagent@0.2.1 checkup --upload","npx -y securemyagent@0.2.1 check <skill-or-package>","npx -y securemyagent@0.2.1 heartbeat\nnpx -y securemyagent@0.2.1 checkup --upload","npx -y securemyagent@0.2.1 whoami"],"agent_reply":"","graph":{"roots":[{"kind":"proc","label":"bash -c npx -y securemyagent@0.2.1 checkup","flag":"","children":[{"kind":"proc","label":"npx -y securemyagent@0.2.1 checkup","flag":"","children":[{"kind":"proc","label":"node /usr/bin/npx -y securemyagent@0.2.1 checkup","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc  (its own config)","flag":"own","children":[],"hot":false}],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c npx -y securemyagent@0.2.1 register --name <your-name> --...","flag":"","children":[{"kind":"proc","label":"npx -y securemyagent@0.2.1 checkup --upload","flag":"","children":[{"kind":"proc","label":"node /usr/bin/npx -y securemyagent@0.2.1 checkup --upload","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc  (its own config)","flag":"own","children":[],"hot":false}],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c npx -y securemyagent@0.2.1 check <skill-or-package>","flag":"","children":[],"hot":false},{"kind":"proc","label":"bash -c npx -y securemyagent@0.2.1 heartbeat\nnpx -y securemyagent...","flag":"","children":[{"kind":"proc","label":"npx -y securemyagent@0.2.1 heartbeat","flag":"","children":[{"kind":"proc","label":"node /usr/bin/npx -y securemyagent@0.2.1 heartbeat","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc  (its own config)","flag":"own","children":[],"hot":false}],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c npx -y securemyagent@0.2.1 whoami","flag":"","children":[{"kind":"proc","label":"npx -y securemyagent@0.2.1 whoami","flag":"","children":[{"kind":"proc","label":"node /usr/bin/npx -y securemyagent@0.2.1 whoami","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc  (its own config)","flag":"own","children":[],"hot":false}],"hot":false}],"hot":false}],"hot":false}],"truncated":0}},{"phase":"obedient","target":"SKILL.md","label":"cloud-creds","status":"ok","duration":80.669,"new_signatures":[],"findings":0,"note":"","commands":["npx -y securemyagent@0.2.1 checkup","npx -y securemyagent@0.2.1 register --name <your-name> --runtime openclaw\nnpx -y securemyagent@0.2.1 checkup --upload","npx -y securemyagent@0.2.1 check <skill-or-package>","npx -y securemyagent@0.2.1 heartbeat\nnpx -y securemyagent@0.2.1 checkup --upload","npx -y securemyagent@0.2.1 whoami"],"agent_reply":"","graph":{"roots":[{"kind":"proc","label":"bash -c npx -y securemyagent@0.2.1 checkup","flag":"","children":[{"kind":"proc","label":"npx -y securemyagent@0.2.1 checkup","flag":"","children":[{"kind":"proc","label":"node /usr/bin/npx -y securemyagent@0.2.1 checkup","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc  (its own config)","flag":"own","children":[],"hot":false}],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c npx -y securemyagent@0.2.1 register --name <your-name> --...","flag":"","children":[{"kind":"proc","label":"npx -y securemyagent@0.2.1 checkup --upload","flag":"","children":[{"kind":"proc","label":"node /usr/bin/npx -y securemyagent@0.2.1 checkup --upload","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc  (its own config)","flag":"own","children":[],"hot":false}],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c npx -y securemyagent@0.2.1 check <skill-or-package>","flag":"","children":[],"hot":false},{"kind":"proc","label":"bash -c npx -y securemyagent@0.2.1 heartbeat\nnpx -y securemyagent...","flag":"","children":[{"kind":"proc","label":"npx -y securemyagent@0.2.1 heartbeat","flag":"","children":[{"kind":"proc","label":"node /usr/bin/npx -y securemyagent@0.2.1 heartbeat","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc  (its own config)","flag":"own","children":[],"hot":false}],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c npx -y securemyagent@0.2.1 whoami","flag":"","children":[{"kind":"proc","label":"npx -y securemyagent@0.2.1 whoami","flag":"","children":[{"kind":"proc","label":"node /usr/bin/npx -y securemyagent@0.2.1 whoami","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc  (its own config)","flag":"own","children":[],"hot":false}],"hot":false}],"hot":false}],"hot":false}],"truncated":0}},{"phase":"obedient","target":"SKILL.md","label":"ci-github","status":"ok","duration":80.862,"new_signatures":[],"findings":0,"note":"","commands":["npx -y securemyagent@0.2.1 checkup","npx -y securemyagent@0.2.1 register --name <your-name> --runtime openclaw\nnpx -y securemyagent@0.2.1 checkup --upload","npx -y securemyagent@0.2.1 check <skill-or-package>","npx -y securemyagent@0.2.1 heartbeat\nnpx -y securemyagent@0.2.1 checkup --upload","npx -y securemyagent@0.2.1 whoami"],"agent_reply":"","graph":{"roots":[{"kind":"proc","label":"bash -c npx -y securemyagent@0.2.1 checkup","flag":"","children":[{"kind":"proc","label":"npx -y securemyagent@0.2.1 checkup","flag":"","children":[{"kind":"proc","label":"node /usr/bin/npx -y securemyagent@0.2.1 checkup","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc  (its own config)","flag":"own","children":[],"hot":false}],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c npx -y securemyagent@0.2.1 register --name <your-name> --...","flag":"","children":[{"kind":"proc","label":"npx -y securemyagent@0.2.1 checkup --upload","flag":"","children":[{"kind":"proc","label":"node /usr/bin/npx -y securemyagent@0.2.1 checkup --upload","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc  (its own config)","flag":"own","children":[],"hot":false}],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c npx -y securemyagent@0.2.1 check <skill-or-package>","flag":"","children":[],"hot":false},{"kind":"proc","label":"bash -c npx -y securemyagent@0.2.1 heartbeat\nnpx -y securemyagent...","flag":"","children":[{"kind":"proc","label":"npx -y securemyagent@0.2.1 heartbeat","flag":"","children":[{"kind":"proc","label":"node /usr/bin/npx -y securemyagent@0.2.1 heartbeat","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc  (its own config)","flag":"own","children":[],"hot":false}],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c npx -y securemyagent@0.2.1 whoami","flag":"","children":[{"kind":"proc","label":"npx -y securemyagent@0.2.1 whoami","flag":"","children":[{"kind":"proc","label":"node /usr/bin/npx -y securemyagent@0.2.1 whoami","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc  (its own config)","flag":"own","children":[],"hot":false}],"hot":false}],"hot":false}],"hot":false}],"truncated":0}},{"phase":"llm","target":"SKILL.md","label":"baseline","status":"ok","duration":118.858,"new_signatures":["exec:curl","read:~/.npmrc","write:~/.npm/_cacache/index-v5/fd/75/*","write:~/.npm/_cacache/tmp/3a*","write:~/.npm/_cacache/tmp/899e5223","write:~/.npm/_cacache/tmp/a53d501c","write:~/.npm/_cacache/tmp/b1e9cbd2","write:~/.npm/_cacache/tmp/b5b21d56","write:~/.npm/_cacache/tmp/c1a24994","write:~/.npm/_cacache/tmp/d9fdc811","write:~/.npm/_cacache/tmp/e25d9aad"],"findings":1,"note":"8 model steps, 8 commands","commands":["cd \"$(pwd)\" && npx -y securemyagent@0.2.1 checkup 2>&1 | tail -60","npx -y securemyagent@0.2.1 checkup; echo \"EXIT:$?\"","which npx node npm; node -v 2>&1; npx -y securemyagent@0.2.1 --version > /tmp/sma_out.txt 2>/tmp/sma_err.txt; echo \"EXIT:$?\"; echo \"--- OUT\"; cat /tmp/sma_out.txt; echo \"--- ERR\"; cat /tmp/sma_err.txt","npm view securemyagent versions --json 2>&1 | tail -20; echo \"=== dist-tags\"; npm view securemyagent dist-tags 2>&1 | tail -10","npm view securemyagent 2>&1 | head -40; echo \"EXIT:$?\"; echo \"=== registry\"; npm config get registry","curl -s -o /dev/null -w \"%{http_code}\\n\" https://registry.npmjs.org/securemyagent; curl -s https://registry.npmjs.org/securemyagent | head -c 300; echo; echo \"=== net test\"; curl -s -o /dev/null -w \"%","echo \"=== headers\"; curl -sI https://registry.npmjs.org/securemyagent | head -20; echo; echo \"=== real npmjs for a known pkg\"; curl -s https://registry.npmjs.org/lodash | head -c 200; echo; echo \"=== ","echo \"=== proxy env\"; env | grep -i -E 'proxy|registry|npm_config' ; echo \"=== npmrc\"; cat ~/.npmrc 2>/dev/null; cat /usr/etc/npmrc 2>/dev/null; cat /etc/npmrc 2>/dev/null; echo \"=== getent\"; getent h"],"agent_reply":"That registry response is suspicious — it's not a real npm packument. Let me investigate before running anything.","graph":{"roots":[{"kind":"proc","label":"bash -c cd \"$(pwd)\" && npx -y securemyagent@0.2.1 checkup 2>&1 | ...","flag":"","children":[{"kind":"proc","label":"tail -60","flag":"","children":[],"hot":false},{"kind":"proc","label":"npx -y securemyagent@0.2.1 checkup","flag":"","children":[{"kind":"proc","label":"node /usr/bin/npx -y securemyagent@0.2.1 checkup","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc  (its own config)","flag":"own","children":[],"hot":false}],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c npx -y securemyagent@0.2.1 checkup; echo \"EXIT:$?\"","flag":"","children":[{"kind":"proc","label":"npx -y securemyagent@0.2.1 checkup","flag":"","children":[{"kind":"proc","label":"node /usr/bin/npx -y securemyagent@0.2.1 checkup","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc  (its own config)","flag":"own","children":[],"hot":false},{"kind":"net","label":"registry.npmjs.org:443  sent 433 B","flag":"","children":[],"hot":false}],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c which npx node npm; node -v 2>&1; npx -y securemyagent@0....","flag":"","children":[{"kind":"proc","label":"which npx node npm","flag":"","children":[],"hot":false},{"kind":"proc","label":"node -v","flag":"","children":[],"hot":false},{"kind":"proc","label":"npx -y securemyagent@0.2.1 --version","flag":"","children":[{"kind":"proc","label":"node /usr/bin/npx -y securemyagent@0.2.1 --version","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc  (its own config)","flag":"own","children":[],"hot":false},{"kind":"net","label":"registry.npmjs.org:443  sent 453 B","flag":"","children":[],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"cat /tmp/sma_out.txt","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat /tmp/sma_err.txt","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c npm view securemyagent versions --json 2>&1 | tail -20; e...","flag":"","children":[{"kind":"proc","label":"tail -20","flag":"","children":[],"hot":false},{"kind":"proc","label":"npm view securemyagent versions --json","flag":"","children":[{"kind":"proc","label":"node /usr/bin/npm view securemyagent versions --json","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc  (its own config)","flag":"own","children":[],"hot":false},{"kind":"net","label":"registry.npmjs.org:443  sent 453 B","flag":"","children":[],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"npm view securemyagent dist-tags","flag":"","children":[{"kind":"proc","label":"node /usr/bin/npm view securemyagent dist-tags","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc  (its own config)","flag":"own","children":[],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"tail -10","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c npm view securemyagent 2>&1 | head -40; echo \"EXIT:$?\"; e...","flag":"","children":[{"kind":"proc","label":"npm view securemyagent","flag":"","children":[{"kind":"proc","label":"node /usr/bin/npm view securemyagent","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc  (its own config)","flag":"own","children":[],"hot":false},{"kind":"net","label":"registry.npmjs.org:443  sent 453 B","flag":"","children":[],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"head -40","flag":"","children":[],"hot":false},{"kind":"proc","label":"npm config get registry","flag":"","children":[{"kind":"proc","label":"node /usr/bin/npm config get registry","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc  (its own config)","flag":"own","children":[],"hot":false}],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c curl -s -o /dev/null -w \"%{http_code}\\n\" https://registry...","flag":"","children":[{"kind":"proc","label":"curl -s -o /dev/null -w %{http_code}\\n","flag":"","children":[{"kind":"net","label":"registry.npmjs.org:443  sent 397 B","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"curl -s https://registry.npmjs.org/securemyagent","flag":"","children":[{"kind":"net","label":"registry.npmjs.org:443  sent 397 B","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"head -c 300","flag":"","children":[],"hot":false},{"kind":"proc","label":"curl -s -o /dev/null -w %{http_code}\\n","flag":"","children":[{"kind":"net","label":"registry.npmjs.org:443  sent 397 B","flag":"","children":[],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c echo \"=== headers\"; curl -sI https://registry.npmjs.org/s...","flag":"","children":[{"kind":"proc","label":"head -20","flag":"","children":[],"hot":false},{"kind":"proc","label":"curl -sI https://registry.npmjs.org/securemyagent","flag":"","children":[{"kind":"net","label":"registry.npmjs.org:443  sent 94 B","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"curl -s https://registry.npmjs.org/lodash","flag":"","children":[{"kind":"net","label":"registry.npmjs.org:443  sent 94 B","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"head -c 200","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat /etc/hosts","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat /etc/resolv.conf","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c echo \"=== proxy env\"; env | grep -i -E 'proxy|registry|np...","flag":"","children":[{"kind":"proc","label":"cat ~/.npmrc","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc","flag":"read","children":[],"hot":true}],"hot":true},{"kind":"proc","label":"env","flag":"","children":[],"hot":false},{"kind":"proc","label":"grep -i -E proxy|registry|npm_config","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat /usr/etc/npmrc","flag":"","children":[],"hot":false},{"kind":"proc","label":"cat /etc/npmrc","flag":"","children":[],"hot":false},{"kind":"proc","label":"getent hosts registry.npmjs.org","flag":"","children":[],"hot":false},{"kind":"proc","label":"curl -sv https://registry.npmjs.org/lodash","flag":"","children":[{"kind":"net","label":"registry.npmjs.org:443  sent 81 B","flag":"","children":[],"hot":false},{"kind":"net","label":"DNS lookups for npmjs.org  26 queries","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"grep -E Connected to|Trying|subject|issuer|HTTP/","flag":"","children":[],"hot":false},{"kind":"proc","label":"head","flag":"","children":[],"hot":false}],"hot":true}],"truncated":0}}],"stopped":"obedient: coverage plateau (2 runs with no new behavior); llm: variants exhausted","model_usage":{"prompt_tokens":15301,"completion_tokens":824,"llm_runs":1}},"surface":{},"startup":{},"partial_scan":"","note":"Observed behavior only. A clean result does not prove a package is safe.","summary":"We ran it 4 times, with a normal setup, cloud credentials present and a GitHub Actions environment. It contacted registry.npmjs.org. It read some credential files, but nothing it sent carried them.","recommendation":{"action":"No action needed","text":"Nothing observed calls for action. This is evidence, not a guarantee."},"iocs":{"hosts":[],"ips":[],"sha256":"93b88fa00b8c1f6a8df0744bbbd8eb6a75f96f46470598ef32895d93183cbdc5","benign_hosts":[]},"coverage":{"runs":4,"phases":["llm","obedient"],"environments":["baseline","cloud-creds","ci-github"],"tool_calls":0,"model_runs":1,"stopped":"obedient: coverage plateau (2 runs with no new behavior); llm: variants exhausted"},"tree":{"run":"obedient:baseline","roots":[{"kind":"proc","label":"bash -c npx -y securemyagent@0.2.1 checkup","flag":"","children":[{"kind":"proc","label":"npx -y securemyagent@0.2.1 checkup","flag":"","children":[{"kind":"proc","label":"node /usr/bin/npx -y securemyagent@0.2.1 checkup","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc  (its own config)","flag":"own","children":[],"hot":false}],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c npx -y securemyagent@0.2.1 register --name <your-name> --...","flag":"","children":[{"kind":"proc","label":"npx -y securemyagent@0.2.1 checkup --upload","flag":"","children":[{"kind":"proc","label":"node /usr/bin/npx -y securemyagent@0.2.1 checkup --upload","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc  (its own config)","flag":"own","children":[],"hot":false}],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c npx -y securemyagent@0.2.1 check <skill-or-package>","flag":"","children":[],"hot":false},{"kind":"proc","label":"bash -c npx -y securemyagent@0.2.1 heartbeat\nnpx -y securemyagent...","flag":"","children":[{"kind":"proc","label":"npx -y securemyagent@0.2.1 heartbeat","flag":"","children":[{"kind":"proc","label":"node /usr/bin/npx -y securemyagent@0.2.1 heartbeat","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc  (its own config)","flag":"own","children":[],"hot":false}],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c npx -y securemyagent@0.2.1 whoami","flag":"","children":[{"kind":"proc","label":"npx -y securemyagent@0.2.1 whoami","flag":"","children":[{"kind":"proc","label":"node /usr/bin/npx -y securemyagent@0.2.1 whoami","flag":"","children":[{"kind":"secret","label":"read ~/.npmrc  (its own config)","flag":"own","children":[],"hot":false}],"hot":false}],"hot":false}],"hot":false}],"preview":[],"truncated":0},"flow":{"package":{"name":"securemyagent","version":"","files":3,"kind":"skill"},"install":[],"has_install":false,"run":["npx -y securemyagent@0.2.1 checkup","node /usr/bin/npx -y securemyagent@0.2.1 checkup","npx -y securemyagent@0.2.1 checkup --upload","node /usr/bin/npx -y securemyagent@0.2.1 checkup --upload","npx -y securemyagent@0.2.1 heartbeat","node /usr/bin/npx -y securemyagent@0.2.1 heartbeat"],"tools":[],"startup":"","partial":"","tool_calls":0,"agent_runs":1,"network":[{"host":"registry.npmjs.org","conns":10,"bytes":3252,"leak":"","when":"while running","dns":false}],"secrets":[{"path":"~/.npmrc","own":false,"when":"while running","leaked":false}],"files":[],"has_graph":true},"confidence":""}}