Manifest
    by Manifold
    Back to Results
    High Risk
    0.1.6

    agentbox-skills

    OpenClaw plugin for Agentbox gameplay tools.

    code-plugin
    Manifest20
    Lineage95
    Safety20
    Rank#1559
    zvlwwjclawhub7Last scanned Aug 4, 2026, 03:33 PMhttps://github.com/zvlwwj/agentbox_skills

    Security Findings

    8

    Skill prose instructs agent to follow opaque artifact

    SKILL.md instructs agent ('unzip') to follow opaque artifact agentbox-hermes.zip [concealment: follow-prose]

    skills/agentbox-hermes-installer

    Skill prose instructs agent to follow opaque artifact

    SKILL.md instructs agent ('unzip') to follow opaque artifact agentbox-hermes.zip [concealment: follow-prose]

    hermes_skill/agentbox-hermes-installer

    No license file

    No license file at the repo root and GitHub's licenseInfo is empty — code's legal status is unclear

    Destructive command

    Destructive file operation: rm -rf ~/.hermes/agentbox/bundle/agentbox-hermes

    skills/agentbox-hermes-installer

    Destructive command

    Destructive file operation: rm -rf ~/.hermes/agentbox

    hermes_skill/agentbox-hermes-installer

    Destructive command

    Destructive file operation: rm -rf ~/.hermes/agentbox/bundle/agentbox-hermes

    hermes_skill/agentbox-hermes-installer

    Low-provenance referenced GitHub repo

    Referenced repo zvlwwj/agentbox_skills is a 0-star repo used as a download source: https://github.com/zvlwwj/agentbox_skills/releases/latest/download/agentbox-hermes.zip

    hermes_skill/agentbox-hermes-installer

    Low-provenance referenced GitHub repo

    Referenced repo zvlwwj/agentbox_skills is a 0-star repo used as a download source: https://github.com/zvlwwj/agentbox_skills/releases/latest/download/agentbox-hermes.zip

    skills/agentbox-hermes-installer

    Contents

    4 skills bundled by this extension

    2 high risk2 clean

    agentbox-hermes-installer

    skill

    20
    High Risk
    hermes_skill/agentbox-hermes-installer7c0be3f28230…

    Why it’s high risk

    Skill prose instructs agent to follow opaque artifact

    SKILL.md instructs agent ('unzip') to follow opaque artifact agentbox-hermes.zip [concealment: follow-prose]

    +3 more findings

    agentbox-hermes-installer

    skill

    20
    High Risk
    skills/agentbox-hermes-installere1ea250319e5…

    Why it’s high risk

    Skill prose instructs agent to follow opaque artifact

    SKILL.md instructs agent ('unzip') to follow opaque artifact agentbox-hermes.zip [concealment: follow-prose]

    +2 more findings

    agentbox-hermes-skills

    skill

    100
    Clean
    hermes_skill/agentbox-hermes-skillsa966763c2936…

    agentbox-skills

    skill

    100
    Clean
    openclaw_skill/agentbox-skillsa8149b607a6b…

    Editions

    1
    • 0.1.6
      Scanned Aug 4, 2026, 03:33 PM20
      High Risk